2024-05-23_240332263e3a7c8f4a3057bd3a5fb9aa_cryptolocker

General

Target

2024-05-23_240332263e3a7c8f4a3057bd3a5fb9aa_cryptolocker
Size

96KB
MD5

240332263e3a7c8f4a3057bd3a5fb9aa
SHA1

6e24e48929e3c45b9aa9c211e70b4ba7424ca17d
SHA256

9753932ae0403472f5e175eb38d560c61cf73ae3af55c3ec8ddcd5b3eec331ae
SHA512

a10b2434c7eb498d8748b6e5771a1b86a96be41012d2bec1f445c8cc54f7f3d1400cfac612b6c5bcbb00b7d998b238a0e0b81f23b33febd1c7f8cd83a5fa2eba
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRXrZSUfFKazNclMjNUvAcT:xj+VGMOtEvwDpjubwQEI8UtzNcO8AcT

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_240332263e3a7c8f4a3057bd3a5fb9aa_cryptolocker