2024-05-22_70f633e4acaa27c6892ae97b8ef87412_cryptolocker

General

Target

2024-05-22_70f633e4acaa27c6892ae97b8ef87412_cryptolocker
Size

48KB
MD5

70f633e4acaa27c6892ae97b8ef87412
SHA1

b1d777f74ce7a749adeb8897659117c9b8127981
SHA256

7ed6b5301989935b8af5f11e204ceefbcc5875bd7a7cf0ae38fb8e25f704aec5
SHA512

9bbc32237457472bebff8608c8a27e0db6a8cc3a9b27d080266fadcc445f21cc4c21c9893466db0131d7cdcc659ed4918d5440ed29774e81f3a80836b318d6cb
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWE6BLbjG9RzhwaRh+Ep6S:xj+VGMOtEvwDpjy+TRh+EUS

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_70f633e4acaa27c6892ae97b8ef87412_cryptolocker