2024-05-23_0cd7e81faf9c27f078ec2bce27242d2c_cryptolocker

General

Target

2024-05-23_0cd7e81faf9c27f078ec2bce27242d2c_cryptolocker
Size

24KB
MD5

0cd7e81faf9c27f078ec2bce27242d2c
SHA1

ca2ff83a6b5419544506d35b330ccd3641084f36
SHA256

db0420194c3838bbe6594eb967885752838b09946e57e76c300a576061c986db
SHA512

b19126af58903c9110d39366003668871d1ecf81cd1574355be92d857f2b5fac7f8beecf7d7ef984143d5cd05264a505627862cd436e95ce0d4b24d78774e6e6
SSDEEP

384:bVCPwFRuFn65arz1ZhdaXFXSCVQTLfjDp6HMJ2C:bVCPwFRo6CpwXFXSqQXfjAsJ9

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_0cd7e81faf9c27f078ec2bce27242d2c_cryptolocker
unpack001/out.upx