2024-05-22_ad478df1fa4bfd1ad9514e5fb8eb2360_cryptolocker

General

Target

2024-05-22_ad478df1fa4bfd1ad9514e5fb8eb2360_cryptolocker
Size

52KB
MD5

ad478df1fa4bfd1ad9514e5fb8eb2360
SHA1

d7be79151ae830b853a8e3e67683d3d26ffddd88
SHA256

7c34455a41f96525ae68e7a1009e41a6daba13147b8296efbf398d2b085cd80a
SHA512

da64ca6f7da6293e568d9913d1eb1aecdad2efdd5dba396655729f5492f5a86b0311f4fcb6ad0021706c69db49b212cb5bb467ea34f176b3771d93592e7e838f
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqPhqlcnvhx5/xFRY+iyys:6j+1NMOtEvwDpjr8hhXy+iyys

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_ad478df1fa4bfd1ad9514e5fb8eb2360_cryptolocker