sodinokibi | e2edb5978e16e45758fbdbc75b1f83f5d4b3b52a8310876f08504a33684d68a1

Reason

config extraction: sodinokibi: invalid character 'â' looking for beginning of value

General

Target
e2edb5978e16e45758fbdbc75b1f83f5d4b3b52a8310876f08504a33684d68a1
Size 180KB
Sample220124-a62dmsghhm
SHA256 e2edb5978e16e45758fbdbc75b1f83f5d4b3b52a8310876f08504a33684d68a1
MD5 8823c8a992b7320217b95b380fc23d29
SHA1 23dd46a83563073d033955a13ef630d3fa9fa0e4
SHA512 c029bf853ee69b7a3cd642480bcb69007f8df1c48aa701a222dfebd5b899178c076326ffa8826a2db37a7fd2f7034605147df8659822deca8a1dc78893e0eeeb
SSDEEP 3072:Hp5SexkWicxa+taLDl236ijeSBZJyQHHwI+EE9tQe1:JvGWRxabm6ijDJyQHHwIJ2
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sodinokibi

Sodinokibi/Revil sample 1 IoCs

resource	yara_rule
sample	family_sodinokobi

SHA256 e2edb5978e16e45758fbdbc75b1f83f5d4b3b52a8310876f08504a33684d68a1
MD5 8823c8a992b7320217b95b380fc23d29
SHA1 23dd46a83563073d033955a13ef630d3fa9fa0e4
SHA512 c029bf853ee69b7a3cd642480bcb69007f8df1c48aa701a222dfebd5b899178c076326ffa8826a2db37a7fd2f7034605147df8659822deca8a1dc78893e0eeeb
SSDEEP 3072:Hp5SexkWicxa+taLDl236ijeSBZJyQHHwI+EE9tQe1:JvGWRxabm6ijDJyQHHwIJ2
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths