2024-05-21_046829dfcb6db45ad7d301adeede36c9_cryptolocker

General

Target

2024-05-21_046829dfcb6db45ad7d301adeede36c9_cryptolocker
Size

87KB
MD5

046829dfcb6db45ad7d301adeede36c9
SHA1

2b3047cae1d3ab3b4081d9ff6d3b8c0fc7ea5357
SHA256

6b7e209aef90f5586652803cce623f3bead4e61894b6be52d1749d24b289838b
SHA512

07c16d46bd5f1ee1056a44d0ca3913b0baa5bed2045e431441a735cc5e8d9f2ed44eafb600a3fc3f7240a0fb88d6f08b68bc547b3ce427c063f6c19b56efe936
SSDEEP

1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOT7vM5Rd:T6a+rdOOtEvwDpjNQ

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_046829dfcb6db45ad7d301adeede36c9_cryptolocker