2024-05-23_e9a9895cfa5163c9bf3809e0167995d0_cryptolocker

General

Target

2024-05-23_e9a9895cfa5163c9bf3809e0167995d0_cryptolocker
Size

64KB
MD5

e9a9895cfa5163c9bf3809e0167995d0
SHA1

3446d1502a26c99c9affef6c6ccbdf0149b19a4d
SHA256

50769b00ee54ec3bb96da0cddfe74a1feaef518816061a0fe55c7e20191aa351
SHA512

6f7cc32ca5b42804c1a82162eee5f66072a23eb2e2af1683fff1398105a0158c88691614c3f681a80d4eb77767c557188c0ea3f6fc703b90fe5af60aee8493af
SSDEEP

1536:qmbhXDmjr5MOtEvwDpj5cDtKkQZQRKb61vSbgtsiv:BbdDmjr+OtEvwDpjM8q

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_e9a9895cfa5163c9bf3809e0167995d0_cryptolocker