2024-05-22_1f6610d85973dd027de5c78853000c87_cryptolocker

General

Target

2024-05-22_1f6610d85973dd027de5c78853000c87_cryptolocker
Size

51KB
MD5

1f6610d85973dd027de5c78853000c87
SHA1

eb2aff764c098155507822e6ed97901040a6f495
SHA256

38ad8662e45b3eb51be97e7852945a59a154c8f40a11e09bc6097294972c2633
SHA512

a2bcade852cadfcefe8525a016e07bfea2d6808d17a8c3e0261894e739549b79c1e5390ab65fc42d30995e30b30ab5ba41d17d541bb6d791392a45ed628485c0
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyyw:6j+1NMOtEvwDpjr8hhXy+iyyw

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_1f6610d85973dd027de5c78853000c87_cryptolocker