2024-05-27_d32cf8b24d3e9d5ca6b3d4726f3528c2_cryptolocker

General

Target

2024-05-27_d32cf8b24d3e9d5ca6b3d4726f3528c2_cryptolocker
Size

57KB
MD5

d32cf8b24d3e9d5ca6b3d4726f3528c2
SHA1

911bc8f8c35dffd4fbdc896e729de20c8a6a9598
SHA256

0905f4a12055a51eeb4809bd28a5bf8f2d3a14b4262958138825eb4f709c239f
SHA512

4066a39ceb8251bb109e7a0a917b73fd20624e145449eac4ab530e3fc7b5f81f5de9da058749a85ded3f4831e83cc5a5c6479265fe8b98277ac9b59aa456d8ff
SSDEEP

768:bP9g/WItCSsAfFaeOcfXVr3BPOz5CFBmNuFgUjlgzk:bP9g/xtCS3Dxx0nk

Score

10^/10

upx

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

UPX dump on OEP (original entry point) 1 IoCs

resource	yara_rule
sample	UPX

UPX packed file 1 IoCs

Detects executables packed with UPX/modified UPX open source packer.

resource	yara_rule
sample	upx

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-05-27_d32cf8b24d3e9d5ca6b3d4726f3528c2_cryptolocker