2024-05-24_ad521d1ac7929b4939062d58514cdd28_cryptolocker

General

Target

2024-05-24_ad521d1ac7929b4939062d58514cdd28_cryptolocker
Size

69KB
MD5

ad521d1ac7929b4939062d58514cdd28
SHA1

7e841ab2488af39dff583812e82d3edf7e17e104
SHA256

c3ad8337208c5baf8f10f46bc7a370f9aaa9dac4c16409c0235a064c308ccacc
SHA512

cdea55fe3d047a48ea0382a8fdb2b374af1f51b4687464d5645311a4aabc421b201598143bd595400df836fb7af68a04ee8555a16b3543fad59ff1537f471a0c
SSDEEP

1536:quJu9cvMOtEvwDpjWYTjipvF2bx1PQAe6:78SEOtEvwDpjWYvQd2Pb

Score

10^/10

upx

Detection of CryptoLocker Variants 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_rule2
static1/unpack001/out.upx	CryptoLocker_rule2

Detection of Cryptolocker Samples 2 IoCs

Processes:

resource	yara_rule
sample	CryptoLocker_set1
static1/unpack001/out.upx	CryptoLocker_set1

UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 2 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_ad521d1ac7929b4939062d58514cdd28_cryptolocker
unpack001/out.upx