2024-05-24_e5b89afc04cfcf4705fe14eef1fd30d1_cryptolocker

General

Target

2024-05-24_e5b89afc04cfcf4705fe14eef1fd30d1_cryptolocker
Size

60KB
MD5

e5b89afc04cfcf4705fe14eef1fd30d1
SHA1

1226299b21746d200d19fc570033d51be56ba628
SHA256

71bde2e7e9e9c0095de88257ad615f5a50d91f4e188c7549b4362c82fd732fd5
SHA512

019cd2eedc3467cdd958a7c0549c39c1593a71e7b58105702347ae944bb81b4f29564cd3426a71065cc31da82bc90a6c7b1fab5155f594a49e975fb396d41a20
SSDEEP

1536:z6QFElP6n+gKmddpMOtEvwDpj9aYaUf3j:z6a+CdOOtEvwDpjQo

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_e5b89afc04cfcf4705fe14eef1fd30d1_cryptolocker