Analysis
-
max time kernel
119s -
max time network
131s -
platform
windows7_x64 -
resource
win7-en-20211104 -
submitted
08-12-2021 10:11
Static task
static1
Behavioral task
behavioral1
Sample
sodinokibi.exe
Resource
win7-en-20211104
windows7_x64
0 signatures
0 seconds
Behavioral task
behavioral2
Sample
sodinokibi.exe
Resource
win10-en-20211104
windows10_x64
0 signatures
0 seconds
General
-
Target
sodinokibi.exe
-
Size
143KB
-
MD5
a3749c66f65d247d8a6fae1be26d3ef9
-
SHA1
c394464bba56e62ddfe2c9073932fb656fb78b6c
-
SHA256
d191761ac8a7b0a3525764664609a8fccfa3732d331c525e9c1c9eb0a7068a9c
-
SHA512
65bc1dba7e4de098e6b27b13b1e0723f703f645e4a4c6e53b7b03ec096a70d48ec2aca7e8bcd911ced61bab35e95983510604421ef35a593278414bfbb1cb01c
Score
1/10
Malware Config
Signatures
-
Suspicious behavior: EnumeratesProcesses 1 IoCs
Processes:
sodinokibi.exepid process 1372 sodinokibi.exe
Processes
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
memory/1372-55-0x0000000075971000-0x0000000075973000-memory.dmpFilesize
8KB
-
memory/1372-56-0x0000000000C01000-0x0000000000C83000-memory.dmpFilesize
520KB
-
memory/1372-57-0x0000000000070000-0x000000000007A000-memory.dmpFilesize
40KB
-
memory/1372-59-0x0000000000080000-0x0000000000081000-memory.dmpFilesize
4KB
-
memory/1372-60-0x0000000000280000-0x0000000000281000-memory.dmpFilesize
4KB
-
memory/1372-61-0x0000000000290000-0x0000000000291000-memory.dmpFilesize
4KB
-
memory/1372-58-0x0000000000CD0000-0x0000000000D6F000-memory.dmpFilesize
636KB
-
memory/1372-62-0x0000000000D70000-0x0000000000E9D000-memory.dmpFilesize
1.2MB
-
memory/1372-63-0x0000000000630000-0x000000000064F000-memory.dmpFilesize
124KB
-
memory/1372-65-0x00000000002A0000-0x00000000002A6000-memory.dmpFilesize
24KB
-
memory/1372-64-0x0000000002530000-0x0000000002639000-memory.dmpFilesize
1.0MB