2024-05-23_364296a05beaaf312154f867cd017d5e_cryptolocker

General

Target

2024-05-23_364296a05beaaf312154f867cd017d5e_cryptolocker
Size

96KB
MD5

364296a05beaaf312154f867cd017d5e
SHA1

e7916c4c8c9cf2913b6d106203932d6ff586be0a
SHA256

7c0439b3feffecde6a31651248bd11584614189d18dc4f20942d04ca68ee8a4a
SHA512

dc66f425471212c67350b91d1b192a99c27109f1238bf20bd7f218f151d15fff46124aa4e8a36568dac7dc031b04abe5ecbc979e378019a4f28ce8e96313d3e2
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcP:xj+VGMOtEvwDpjubwQEI8UtzNcO8AcP

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_364296a05beaaf312154f867cd017d5e_cryptolocker