2024-05-22_5697328c6d213238f82802f53ef82030_cryptolocker

General

Target

2024-05-22_5697328c6d213238f82802f53ef82030_cryptolocker
Size

69KB
MD5

5697328c6d213238f82802f53ef82030
SHA1

e3ca4fdf48fa5169fa9d8785b2097cdc245864d5
SHA256

645e4c1d998c9eca863ed9dcdef81f624d680b38513cab93c76c2f5d4703ce94
SHA512

ecd75c6cf1dee23d4fd53a0314bacf7b9d9f6e969d0293fa8ab23407327282fabb55ee24449a308e028838f695844617162b4a6f8178e82756ba2cfa21f50db8
SSDEEP

768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1Pa:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAa

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_5697328c6d213238f82802f53ef82030_cryptolocker
unpack001/out.upx