2024-05-24_4424078f1e0e8e88db235c9cf283ef74_cryptolocker

General

Target

2024-05-24_4424078f1e0e8e88db235c9cf283ef74_cryptolocker
Size

55KB
MD5

4424078f1e0e8e88db235c9cf283ef74
SHA1

a9b43024c8096b54e6c828fab746dfc20a6dde6d
SHA256

81048f3debdf218a9ed56bc551831deada130b8b90ff090007927a9e410a1bbb
SHA512

b9969682bca98a5264075a30104e7e7f1f46746a111bfa98b3b13962f9a458a51727cf9453acba9782518105a794cd9a84bf4f647bca53515fc378e617a82e36
SSDEEP

768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlQ:bP9g/xtCS3Dxx0b

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_4424078f1e0e8e88db235c9cf283ef74_cryptolocker