2024-05-22_1f10bcf9dd9ef128e8257d6c1a2ecc8a_cryptolocker

General

Target

2024-05-22_1f10bcf9dd9ef128e8257d6c1a2ecc8a_cryptolocker
Size

52KB
MD5

1f10bcf9dd9ef128e8257d6c1a2ecc8a
SHA1

598064c3814b6a5ccaf05c7d5b45adbac03a279d
SHA256

d5cea2156e24986fa2a025d2f1fb236ab76db70553ba98401947efb895f90271
SHA512

9e54afadd143b05f45b4d88f7f833b2eb746da6932972332b8a93efa621d09298782d0404242148977ab821d0307f8bf9d35e6d13a6ccb90558226b3af96e830
SSDEEP

768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOnF:bODOw9acifAoc+vsF

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_1f10bcf9dd9ef128e8257d6c1a2ecc8a_cryptolocker