2024-05-21_060af52f3d4629cd9f7f51a4942d0ae0_cryptolocker

General

Target

2024-05-21_060af52f3d4629cd9f7f51a4942d0ae0_cryptolocker
Size

59KB
MD5

060af52f3d4629cd9f7f51a4942d0ae0
SHA1

27b607807a7cbef13e49fd79cd3c2409d240f0a1
SHA256

6856ff5d30293683c5b05172fad7babd63d776a659c803eee09cebb1d69c059e
SHA512

5469b013e53c3709e1c358ed6ada0b3a78006548713b9fb11051355ade474e2219624d3057ee9fa7a73e361f25adb0a8580321e7ddb5f31ef31cb1974d28d790
SSDEEP

768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAPjp:H6QFElP6n+gou9cvMOtEvwDpjCpVXM

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_060af52f3d4629cd9f7f51a4942d0ae0_cryptolocker