2024-05-22_e2a39bf47f2ba9ac8e1ab2a18c5a4e8a_cryptolocker

General

Target

2024-05-22_e2a39bf47f2ba9ac8e1ab2a18c5a4e8a_cryptolocker
Size

64KB
MD5

e2a39bf47f2ba9ac8e1ab2a18c5a4e8a
SHA1

02b5cc51b5913fb9ac7d429adfda9ac18a1933e5
SHA256

621e8d1f820d47e40341807bf25c626ebc8fb36c66c2810e74860993bbc2935d
SHA512

e04d591e9273fad17a958f46dec25d5b62ab4418ad6086233804b2019559debeba3ec6c884ab2ec2eca568bf82ca043ab7e3bc5ffc84d85aa7ab952497d78dd8
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsie:BbdDmjr+OtEvwDpjM8j

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_e2a39bf47f2ba9ac8e1ab2a18c5a4e8a_cryptolocker