2024-05-21_f5f2ce847cdd9a84fad3296145cb882e_cryptolocker

General

Target

2024-05-21_f5f2ce847cdd9a84fad3296145cb882e_cryptolocker
Size

61KB
MD5

f5f2ce847cdd9a84fad3296145cb882e
SHA1

d7a24de3e23b856a9186f50c72f5d6240a6e5aca
SHA256

6833120fb3c1f8ed2b8b55965a3fa8d29f14587b27e56919bfce614198fbc5fa
SHA512

ff14c8d71d2a6bc04531a0e0d381f75d6e346180a453e7c762c9f2be18a686a0ab498f1204908289da1b81fb9dae25f69820ae9611e9a30239a69d8fc2825a47
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHNMhvV:1nK6a+qdOOtEvwDpjd

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_f5f2ce847cdd9a84fad3296145cb882e_cryptolocker