LockPoS (c740c46b-1d95-42b5-ac3d-2bbab071b859)
The analyzed sample has a recent compilation date (2017-06-24) and is available on VirusTotal. It starts out by resolving several Windows functions using API hashing (CRC32 is used as the hashing function).
| Cluster A | Galaxy A | Cluster B | Galaxy B | Level |
|---|---|---|---|---|
| LockPOS (d2c111bf-ba0d-498a-8ca8-4cc508855872) | Malpedia | LockPoS (c740c46b-1d95-42b5-ac3d-2bbab071b859) | Tool | 1 |