2024-05-21_61f1d27da5ccdabfb55cbf301804945b_cryptolocker

General

Target

2024-05-21_61f1d27da5ccdabfb55cbf301804945b_cryptolocker
Size

44KB
MD5

61f1d27da5ccdabfb55cbf301804945b
SHA1

cf9ed1bbf4144a664c2b480ae3f7552497785d2f
SHA256

0e39192616e6b8afce47c03fe13d3bb6877c6017b9d649c51786eba796a0640d
SHA512

d65e1f290087aed450b667f4310924c890fe78cff0ea855d216792767771f364df287c939d5d94e575093e804d4b25ceea4bbb1df2e9bb4fa8ca0202df15a8ec
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/CtXabM0Dl:6j+1NMOtEvwDpjrR2XabMQl

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_61f1d27da5ccdabfb55cbf301804945b_cryptolocker