2024-05-21_6e1f1f0f0d3a268698a67f5ae8d4e481_cryptolocker

General

Target

2024-05-21_6e1f1f0f0d3a268698a67f5ae8d4e481_cryptolocker
Size

53KB
MD5

6e1f1f0f0d3a268698a67f5ae8d4e481
SHA1

6b389e82acdf2178ec339b04ab606eb439151f09
SHA256

b54354d42786f0bfa9a88610bdf5ce3fd97ae643a30e1e9bfbf51d2fc2c5a50a
SHA512

d94d028d827abf871fa7aa8949b9d2484a44eccb1891cd1511d6ac945d27ebdef13c0faaed807db58fabe216dfd8f19f796b134340733ab24ad98c756289e199
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRp5jlS4:6j+1NMOtEvwDpjr8hhXj5h

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_6e1f1f0f0d3a268698a67f5ae8d4e481_cryptolocker