2024-05-22_4a6ba5cca4f542c3c6bf0ff8b4a8294e_cryptolocker

General

Target

2024-05-22_4a6ba5cca4f542c3c6bf0ff8b4a8294e_cryptolocker
Size

44KB
MD5

4a6ba5cca4f542c3c6bf0ff8b4a8294e
SHA1

06009607f7d6c9341d934696116c742f42b76254
SHA256

abcbf1df312087c1849600b16369845fcfc98bb958325df2808a92461929dbe5
SHA512

9f30f1da48c36ece7efc4428e4008895c02cf56c22913eb9ce3487f21c675448786be8ba937222de9b53726f4eecab4444bbc97f998aece27cf227a1a796c65f
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDH:6j+1NMOtEvwDpjrRrb

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_4a6ba5cca4f542c3c6bf0ff8b4a8294e_cryptolocker