2024-05-21_5aa6baf4ae382ad892cff7a3a78b17a0_cryptolocker

General

Target

2024-05-21_5aa6baf4ae382ad892cff7a3a78b17a0_cryptolocker
Size

59KB
MD5

5aa6baf4ae382ad892cff7a3a78b17a0
SHA1

24fcdaaa3c01152b305e3444f7424daa8dbb46bd
SHA256

c02af9654906d66bfb2b09428b00f630aa942d9eb35723e44e4707b13ff00fce
SHA512

aea466872de9e5eff0e9528db90799e450f22268d6fa3c9350434ac63f51484e05eec2271c53d7bd2b07ec05ff5068f006b2c94a841f561c298ea557783b4ed4
SSDEEP

768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPB3C:H6QFElP6n+gou9cvMOtEvwDpjCpVXYy

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_5aa6baf4ae382ad892cff7a3a78b17a0_cryptolocker