2024-05-23_432555650bff65ebdddf98bd61355549_cryptolocker

General

Target

2024-05-23_432555650bff65ebdddf98bd61355549_cryptolocker
Size

78KB
MD5

432555650bff65ebdddf98bd61355549
SHA1

8fccf408ac99e38887dbe6d402eba588ee8b83d5
SHA256

5fa9f0b2817cd7cbb7c8e2f73c1c26eb4267a004a1d394e52defb1a15b68b086
SHA512

f23145857920fa41ba5b2781f267db6dad5d4ef6bfc68482c9ee4f3d065a27b13be6878b465dbe25c50ddf759cb4c4cf29271748f296a5de4f642f14e4108004
SSDEEP

1536:T6QFElP6n+gxmddpMOtEvwDpjwaxTNUOAkXtBdxPUxB1Z:T6a+rdOOtEvwDpjNtHPO

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_432555650bff65ebdddf98bd61355549_cryptolocker