2024-05-03_47e39dcd8f8faf984e1a796b42828c32_cryptolocker

General

Target

2024-05-03_47e39dcd8f8faf984e1a796b42828c32_cryptolocker
Size

68KB
MD5

47e39dcd8f8faf984e1a796b42828c32
SHA1

6ef05c6f057e82221196ffe28b11c718bb75c4f0
SHA256

b418eb6491d9e91578603bd5999e9b353534548cfe54834e45428b703e6e9cba
SHA512

1596f06c4a4247d066e785119cc882efd893ba2cfabb5f5c4bb07c0f25df6a4d9b623e2a1de2c6bf9245782129d73bb010bf431ed765c431c322d4017e7ccd01
SSDEEP

768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PL:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAL

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

resource
2024-05-03_47e39dcd8f8faf984e1a796b42828c32_cryptolocker
unpack001/out.upx