2024-05-22_4c8fa1ee157c7f19997227b9c68b1335_cryptolocker

General

Target

2024-05-22_4c8fa1ee157c7f19997227b9c68b1335_cryptolocker
Size

52KB
MD5

4c8fa1ee157c7f19997227b9c68b1335
SHA1

315a939f3433677b4c673f0eb63c253495bd021d
SHA256

b078bbae5d2ebcef282df4ca4378ab098ea067a88ce78a3cf1765481d3be5c74
SHA512

c4b06071e2fd4f5d6c6f795550f77025ff9913a7312f98d25764ca5197d81070ad0bff5c44bc025025474ef4253a0688cf5622f3900c0d7642d05310d3fba81f
SSDEEP

768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOXh:bODOw9acifAoc+vW

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_4c8fa1ee157c7f19997227b9c68b1335_cryptolocker