2024-05-23_68ebedddd883437db1372b478bd1b028_cryptolocker

General

Target

2024-05-23_68ebedddd883437db1372b478bd1b028_cryptolocker
Size

81KB
MD5

68ebedddd883437db1372b478bd1b028
SHA1

a20967c6a884150b63de4e8f8d14e6adac8f335f
SHA256

5c013ac44565b713485a461badb438d97c68f0de28d71ac42e7ee97ed107321e
SHA512

58bcb7419c042b98bfac8cc34b0d6ded09c6b63b4545b884eb44685cd113c9fadcf2bf0b1e2c822551a861fdaaf3877296dae22cdbe7c27887dbc0ac72e8ac37
SSDEEP

1536:zj+soPSMOtEvwDpj4ktBl01hJ0tq1ky7Qsd:zCsanOtEvwDpjW

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_68ebedddd883437db1372b478bd1b028_cryptolocker