2024-05-21_8532875c0a005085dccd2eeab2f923d6_cryptolocker

General

Target

2024-05-21_8532875c0a005085dccd2eeab2f923d6_cryptolocker
Size

57KB
MD5

8532875c0a005085dccd2eeab2f923d6
SHA1

e36998994c5161e2d37dd88210c90cb29e87e03a
SHA256

8a2876616c613fc35ce8f1e3f83947c7dfd1fc0d5ff6db9677fe4fd60646aa05
SHA512

bf49a08ebebafa1f69a2a1977d4668c82ced0d947a1c518a033a2fb7de382d6441a49d012bf4cb28b0f411a6612c6a20c1aaac52bcb3af442a0175d2f8fc6b47
SSDEEP

768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlbQ9mER:bP9g/xtCS3Dxx0AQUO

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-21_8532875c0a005085dccd2eeab2f923d6_cryptolocker