2024-05-21_260931d306915f4970bf1e9a3f0fff0d_cryptolocker

General

Target

2024-05-21_260931d306915f4970bf1e9a3f0fff0d_cryptolocker
Size

43KB
MD5

260931d306915f4970bf1e9a3f0fff0d
SHA1

f12cfc08c9b037320bb6a10923213a8a54071d13
SHA256

22100a6a2b8fb7d43dc6a496c56c9c295a6ddb9f24b8cd809398ba919af7b58a
SHA512

a6452148b98b57e75c24aa24d30acdce7217214d82aa54602f091e0b19ed2f7e41506e8b74674618080a955612de428e906fb11aece570152ee3c81103d8850d
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aDU:6j+1NMOtEvwDpjrRf

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_260931d306915f4970bf1e9a3f0fff0d_cryptolocker