2024-05-23_7b560c15f88eaf4016a113fbc7e1a7c8_cryptolocker

General

Target

2024-05-23_7b560c15f88eaf4016a113fbc7e1a7c8_cryptolocker
Size

96KB
MD5

7b560c15f88eaf4016a113fbc7e1a7c8
SHA1

e4e322c2dd7a7052d516fd3a10ac2f2b0511ef9b
SHA256

85932fb45762996b75843ac0070727a2ac949444b9ed3d4baf0bb884cf60e1e8
SHA512

38d7577f62cb199df82001b9962a9e7a5e68c3ab16032388f9609c0efe4fa8c4c43962ef226352b1479c18920d668c7765a190f933ba322b240edb1d2b7ba0e7
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAce:xj+VGMOtEvwDpjubwQEI8UtzNcO8Ace

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_7b560c15f88eaf4016a113fbc7e1a7c8_cryptolocker