2024-05-24_f6d28fb77cccde9d5cc9a2dbb5cd805a_cryptolocker

General

Target

2024-05-24_f6d28fb77cccde9d5cc9a2dbb5cd805a_cryptolocker
Size

53KB
MD5

f6d28fb77cccde9d5cc9a2dbb5cd805a
SHA1

b234b36f27dc46c04b6587bfa50a797a13d7f08e
SHA256

57f258d6f8f5c3f709d996701d34826a59b319e2791196ca9427bdf5a0e31730
SHA512

1e78ac926161702af517dd41e95bd808eacffc2d7af1e75578c6fdf7ef47e5fb00ca5955e94424a513216155ca7f77d9e4199bebbc501a3f1baa91c030fb3f08
SSDEEP

768:z6LsoEEeegiZPvEhHSG+gzum/kLyMro2GtOOtEvwDpj/YY1J+OTOs:z6QFElP6n+gKmddpMOtEvwDpj31is

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_rule2
Detection of Cryptolocker Samples 1 IoCs

Processes:

resource yara_rule

sample CryptoLocker_set1
UPX dump on OEP (original entry point) 1 IoCs

Processes:

resource yara_rule

sample UPX
UPX packed file 1 IoCs
Detects executables packed with UPX/modified UPX open source packer.
upx

Processes:

resource yara_rule

sample upx

resource	yara_rule
sample	CryptoLocker_rule2

resource	yara_rule
sample	CryptoLocker_set1

resource	yara_rule
sample	UPX

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

Processes:

resource
2024-05-24_f6d28fb77cccde9d5cc9a2dbb5cd805a_cryptolocker