2024-05-23_482876aebf1002217508dabb4b6c7962_cryptolocker

General

Target

2024-05-23_482876aebf1002217508dabb4b6c7962_cryptolocker
Size

52KB
MD5

482876aebf1002217508dabb4b6c7962
SHA1

25ffea41cac4f203637f350cc3cd64abae83f7cf
SHA256

9fcb44dcd47c56b3fbf6024f9a85cf47e7228f5a8d175948d796df06ee00d7f5
SHA512

3ee5dc792dc0b9ecbefea05a42a0e2ed34cb28683c65553c71d0194d6f77da0c2438d7f18f2ad09be5fefe09e0d2f27ed7abb304e5971262a43b6ff8bb7555a7
SSDEEP

768:bODOw9UiamWUB2preAr+OfjH/0S16avdrQFiLjJvtOB:bODOw9acifAoc+vW

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-23_482876aebf1002217508dabb4b6c7962_cryptolocker