2024-05-23_5af901ecd859b54c82c26c7822d1a42f_cryptolocker

General

Target

2024-05-23_5af901ecd859b54c82c26c7822d1a42f_cryptolocker
Size

97KB
MD5

5af901ecd859b54c82c26c7822d1a42f
SHA1

65963cd1e7d52958ebafdbd00b017b345142e313
SHA256

84f5a67954d26e4e23bd497a719d299c2778c4b568e480d23e61e6e6fe08331b
SHA512

8b9ae8b6f9a22fa6c1e89b10915c815c923cf5205503c2eed816f9e057efb20ce730c19c011f66ba9b3058f96f9b1ea5bff51cc132a5c960d53643a7a55b4459
SSDEEP

768:xQz7yVEhs9+4uR1bytOOtEvwDpjWfbZ7uyA36S7MpxRiWNa9mktJY8:xj+VGMOtEvwDpjubwQEIiVmks8

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

Detects executables built or packed with MPress PE compressor 1 IoCs

Processes:

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_5af901ecd859b54c82c26c7822d1a42f_cryptolocker