2024-05-22_d446f151700cd528ac54073be4571d3c_cryptolocker

General

Target

2024-05-22_d446f151700cd528ac54073be4571d3c_cryptolocker
Size

96KB
MD5

d446f151700cd528ac54073be4571d3c
SHA1

24aed672873c53337f7101ed3d1d22ec3f38e089
SHA256

01680dc0824125d792cb30fce5e8299815e6357ff7ea291f70a3bd0d04a687cb
SHA512

e83f24fc5aab1b1f6cbcd1cdd71cdec184520c27f7f3ee830bc25121621a598424bc9c5219db2493e9ee57357b9bb97457e2e63729a9b5294a8ed314de89128a
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcC:xj+VGMOtEvwDpjubwQEI8UtzNcO8AcC

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_d446f151700cd528ac54073be4571d3c_cryptolocker