2024-05-21_4c5979661e45723ff817bda7aaf169fb_cryptolocker

General

Target

2024-05-21_4c5979661e45723ff817bda7aaf169fb_cryptolocker
Size

64KB
MD5

4c5979661e45723ff817bda7aaf169fb
SHA1

cac491fa335490d6919c3bd0d4e9e19a37b13cb7
SHA256

820b5051307905cd5f45c4e04c189b0ad7416087ddc7719986eff66c1e723f47
SHA512

c1dac45ce5068053dbe22989eff5fa00c4e940bf238b8996a66a48b2bf36ddeb0ac70ba3bfeeeb5bcfd626819f4d54d44e41bc86069ba4113208fe7a06e12ca2
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiR:BbdDmjr+OtEvwDpjM8w

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_4c5979661e45723ff817bda7aaf169fb_cryptolocker