2024-05-22_c5452caa39a276d9f919cab0ac0ae112_cryptolocker

General

Target

2024-05-22_c5452caa39a276d9f919cab0ac0ae112_cryptolocker
Size

52KB
MD5

c5452caa39a276d9f919cab0ac0ae112
SHA1

f4c3e2aa88e069fda0245ecdf00e9eec32c13353
SHA256

727609a7662ef071dfcdac5f6da70bef6e00df00d980c72801b74d91d190a82c
SHA512

73fccc2f75b0b4937e9878dc9f7887631b3fdeb8d29233c48df5f1621d1040494d6c01943a6b3ab98c3a6b7990313c66a8ddfe77952199182419f0da3469e79c
SSDEEP

768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOn6:bODOw9acifAoc+vs6

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_c5452caa39a276d9f919cab0ac0ae112_cryptolocker