2024-05-22_ec34b2584f4677f191ed9d8a26c37f03_cryptolocker

General

Target

2024-05-22_ec34b2584f4677f191ed9d8a26c37f03_cryptolocker
Size

67KB
MD5

ec34b2584f4677f191ed9d8a26c37f03
SHA1

8cc25a5bfbae9812d346bd7ddbae7ef13deb50c2
SHA256

e826a48ef7fdebd657b83b17c6ede2fbbfef06a3788e9ea6555c0e2c8077c216
SHA512

601b569ac3550577e60b7aa5022b9c58f385a8dea9ca546b728735773bbd664f6faa467e1d48e30ffd1a1412d776bf14768deef5558e6698435f8033c01d021f
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPOYRmNxt5I52kGEpE0P/xFIPg:6j+1NMOtEvwDpjr8ox8UDEpN/jWg

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_ec34b2584f4677f191ed9d8a26c37f03_cryptolocker