2024-05-21_c182f1980c28458d2043202549b0f470_cryptolocker

General

Target

2024-05-21_c182f1980c28458d2043202549b0f470_cryptolocker
Size

95KB
MD5

c182f1980c28458d2043202549b0f470
SHA1

9712eeebe49f4f135f68c86a795661a42d50248b
SHA256

283965c8e554469fd93e0b65326707e4d4242b7c1ef0266786074cec91de89e9
SHA512

129957bb1533eda19cb7a62ca3d00c919baabd9dd65f16d46f2e2da0d9437b0adaa25cdc5c66b31104e4a63f11c550acff05d42c99489ea13bd9676916a28caf
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJYCr:xj+VGMOtEvwDpjubwQEIiVmksc

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_c182f1980c28458d2043202549b0f470_cryptolocker