2024-05-22_f5dd6718ca76c4172b4b2e0222f611aa_cryptolocker

General

Target

2024-05-22_f5dd6718ca76c4172b4b2e0222f611aa_cryptolocker
Size

52KB
MD5

f5dd6718ca76c4172b4b2e0222f611aa
SHA1

678a66f1cd2412f82ffe2eda528844043306c870
SHA256

bd7dd33a51d7b8f45955dcbbed0aefdbefa5ec275032be9bbbd355a208ec6dca
SHA512

86d7ceef7815ab02a5ce84568072dda46a50973385db7e9859049c127f444e40cf176de54e7ea0e9b1226cfad5f9cbf5eb25053924f66969efdc9b66d28e6ddb
SSDEEP

768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOna:bODOw9acifAoc+vsa

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-22_f5dd6718ca76c4172b4b2e0222f611aa_cryptolocker