2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker

General

Target
2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker
Size 70KB
Sample240611-pylesaxckb
SHA256 c815b78e689307e5dda812fe58fe6955bceaa877a36f505bcff734372731bf14
MD5 0571ab48a9ef7a49b0e08d8278230da1
SHA1 05eaa9d2eb5ccfe6c26efcad34e593beef7ea67c
SHA512 0ef5f64681715ac9adbdbd1a96643e529cda6e9f77b4b0f16673cf62f4f90dbe9850e92e66eccecd421d194ba7270eadb4a921fc12036c0e09727b17ec06893b
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dY:i5nkFGMOtEvwDpjNbwQEI8UZDe
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

Detection of CryptoLocker Variants 1 IoCs

resource	yara_rule
sample	CryptoLocker_rule2

Detects executables built or packed with MPress PE compressor 1 IoCs

resource	yara_rule
sample	INDICATOR_EXE_Packed_MPress

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-11_0571ab48a9ef7a49b0e08d8278230da1_cryptolocker

IMPHASH e021c9fc2c12265365fad587d43783fe
SHA256 c815b78e689307e5dda812fe58fe6955bceaa877a36f505bcff734372731bf14
MD5 0571ab48a9ef7a49b0e08d8278230da1
SHA1 05eaa9d2eb5ccfe6c26efcad34e593beef7ea67c
SHA512 0ef5f64681715ac9adbdbd1a96643e529cda6e9f77b4b0f16673cf62f4f90dbe9850e92e66eccecd421d194ba7270eadb4a921fc12036c0e09727b17ec06893b
SSDEEP 768:XS5nQJ24LR1bytOOtEvwDpjNbZ7uyA36S7MpxRXrZSUNsYD/dY:i5nkFGMOtEvwDpjNbwQEI8UZDe
MD5 SHA1 SHA512 SSDEEP

Minor OS version

0

Major OS version

5

Entry point

41183

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_LINE_NUMS_STRIPPED IMAGE_FILE_LOCAL_SYMS_STRIPPED IMAGE_FILE_32BIT_MACHINE IMAGE_FILE_DEBUG_STRIPPED

PDB paths