2024-05-22_2eab676d9833ba238655c327eff894ee_cryptolocker

General

Target

2024-05-22_2eab676d9833ba238655c327eff894ee_cryptolocker
Size

74KB
MD5

2eab676d9833ba238655c327eff894ee
SHA1

582701ce5ca73b64a5fefe501e0e9d3eae17cdb0
SHA256

b53d863ce3c44f4f5dce292f7ab452aa3f50c811cc0ff71f0d330638d8d932c9
SHA512

d3b52e1bff1d6ce7c7a355c77cffedde1edc8c1e05a2611e10c79cde48a1b8ec587c1437e1231fea4ec5539b8e7d7b05caedf6c224bd16d43ae3dddae7c38284
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjIHsal81Gu:1nK6a+qdOOtEvwDpj3

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_2eab676d9833ba238655c327eff894ee_cryptolocker