2024-05-24_84681b09e89c2268550de5b499a96014_cryptolocker

General

Target

2024-05-24_84681b09e89c2268550de5b499a96014_cryptolocker
Size

64KB
MD5

84681b09e89c2268550de5b499a96014
SHA1

5590a403c0b5b47065c37361cd85f513c7676301
SHA256

29d590b5646ae64651fa1e55ec615a724685293dbedf71cd0dce522c3ad847ad
SHA512

72950a2624ce0298de631cffe87f97037be7b4678c01d352da3fccf9bfbe847513aa744e9111cff897bd5cd6ac185d8a440335a57dc09e80a2be162fd2ffeaca
SSDEEP

1536:P8mnK6QFElP6n+gymddpMOtEvwDpjYZ8xDwm:1nK6a+qdOOtEvwDpjV

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_84681b09e89c2268550de5b499a96014_cryptolocker