2024-05-22_4190a8badb15f3ec0bc2f17cdeca669f_cryptolocker

General

Target

2024-05-22_4190a8badb15f3ec0bc2f17cdeca669f_cryptolocker
Size

69KB
MD5

4190a8badb15f3ec0bc2f17cdeca669f
SHA1

3ce3d9e9005b6762e4df199f444604eefc3a9238
SHA256

9bbc4dbd375d6a7a19dc51c90cee88f0c4ff456c0c373d6b391749cdb811cd36
SHA512

9dc01a9a23cd81c69a97048c30a4b40d6bb5e086dbdf41746afd3377127be66cafa17a025f150b3d49e1518644a94c84e97d29fe447e282bc40ea4b2101ebebc
SSDEEP

768:quVbxjgQNQXtckstOOtEvwDpjAaDOK6PsED3VK2+ZtyOjgO4r9vFAg2rq6W1A1PY:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAY

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_4190a8badb15f3ec0bc2f17cdeca669f_cryptolocker
unpack001/out.upx