2024-05-23_52163b410fc4c9b063167d3bbbbc4450_cryptolocker

General

Target

2024-05-23_52163b410fc4c9b063167d3bbbbc4450_cryptolocker
Size

38KB
MD5

52163b410fc4c9b063167d3bbbbc4450
SHA1

fbfb17822fa0a03a8c9ef9a1d8f4da2d64cf2651
SHA256

42099fa6aeaf87bb786c9fccfdea3edd7c22e91ffe2c5c2e53807b1d982fdc4c
SHA512

32591b7c9a8d6c304354196655638c8c965242d1a1e70ea4e0114581b3b41814a3b5ad87a21dfeae3d98a756ae508bced409a18d8f49838d1cad971a8cf12e6f
SSDEEP

768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRz:qTJu9cvMOtEvwDpjppVXzRz

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_52163b410fc4c9b063167d3bbbbc4450_cryptolocker
unpack001/out.upx