2024-05-23_c529f9ecd9e106b272da396c4c6ec6e1_cryptolocker

General

Target

2024-05-23_c529f9ecd9e106b272da396c4c6ec6e1_cryptolocker
Size

60KB
MD5

c529f9ecd9e106b272da396c4c6ec6e1
SHA1

f196eabde97df4c30f161e0317136147ac507ff1
SHA256

2720d40ae1bd742db106ddf0a88da889f67bd243f3a08917b2eddba17726d2e1
SHA512

e84c97f85afbaba634b7eb5c7fa4c70859f8f543c6fba53a965a3ff864bb37532a50e820d0a9adbb22d6c09f7c9cf009a82a0f8f8a9dc55f3226b4eadeea1b00
SSDEEP

1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3K:z6a+CdOOtEvwDpjQV

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_c529f9ecd9e106b272da396c4c6ec6e1_cryptolocker