2024-05-23_687c814fb7772acd2e045799192a7f8c_cryptolocker

General

Target

2024-05-23_687c814fb7772acd2e045799192a7f8c_cryptolocker
Size

38KB
MD5

687c814fb7772acd2e045799192a7f8c
SHA1

f01284c6ace9893543e138e6af87fef7243a2ce9
SHA256

99f6053f2b24c5a3de6d207d6fe6fc5086459a7a19d4ba24d4d177d63b16a686
SHA512

704fad1225044070d930c37a64bdca2ea7d862562bd241dd78be10107da16d79688c738a824433efc80048807cce28351408b2cad90d171354c925fcfc255102
SSDEEP

768:qTVbxjgQNQXtckstOOtEvwDpjAaD3TUogs/VXpAPWRc:qTJu9cvMOtEvwDpjppVXzRc

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_687c814fb7772acd2e045799192a7f8c_cryptolocker
unpack001/out.upx