2024-05-22_d0a8de91371cdaca5aae932ea05893de_cryptolocker

General

Target

2024-05-22_d0a8de91371cdaca5aae932ea05893de_cryptolocker
Size

44KB
MD5

d0a8de91371cdaca5aae932ea05893de
SHA1

56f45d7c55b53fe5c755ba41fb937d9eca85966c
SHA256

50341e31fc9361f084e6624ae80dd7deb78c55c06ffec4b6f27f3640db3f1b34
SHA512

6c2a925749f129681f273f7060cb70ab295628289efe9f759ce402d5b339a2ebe0419a88048dd6ab43afa5f3ba5162fc53e14f248c9e02802985f6f9e3dc36be
SSDEEP

768:6Qz7yVEhs9+4OR7tOOtEvwDpjLHqh6/aMDR:6j+1NMOtEvwDpjrRrd

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_d0a8de91371cdaca5aae932ea05893de_cryptolocker