2024-05-24_ddcca020067bbb9a2f4bcd82c9737a3b_cryptolocker

General

Target

2024-05-24_ddcca020067bbb9a2f4bcd82c9737a3b_cryptolocker
Size

95KB
MD5

ddcca020067bbb9a2f4bcd82c9737a3b
SHA1

603ac1e5430904cb4dea1773648162873c396c09
SHA256

416d5dde16e16b755d1e8890811bf678a7dd2c335b84023a75919dd7c4a0ad9d
SHA512

8f1a3defe5213445ef637ebc314ce9a46b8c49132f24cd3dbad63a3d6e18085678a27cdce818ab9a3afa5391d185be80205e69652c52a25e171900dd485b042e
SSDEEP

1536:zj+soPSMOtEvwDpj4ktBl01hJl8QAPM8Ho6cRDjgx/kg:zCsanOtEvwDpjBT

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_ddcca020067bbb9a2f4bcd82c9737a3b_cryptolocker