2024-05-22_d055c2c8498baa385bd92d0f6117cbae_cryptolocker

General

Target

2024-05-22_d055c2c8498baa385bd92d0f6117cbae_cryptolocker
Size

59KB
MD5

d055c2c8498baa385bd92d0f6117cbae
SHA1

37125b2c4fe61c63648905b684f63f2c2dc37c13
SHA256

289c976ce53d971da288488a1f152cfab7a09b06bcf72b0d9f94d955e89ee2f2
SHA512

5d7b9a4bd17ceac67942f6e453111ee6e7789a7baa90f94bb27355d89224db04b7fa3c2ceddb101aea25e32f190644aec06d199069bd8f758561fa587fdc9d52
SSDEEP

768:H6LsoEEeegiZPvEhHSG+gk5NQXtckstOOtEvwDpjhBaD3TUogs/VXpAP6p5:H6QFElP6n+gou9cvMOtEvwDpjCpVXn

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_d055c2c8498baa385bd92d0f6117cbae_cryptolocker