sodinokibi | df636be58c9fd0595e88738097afa0cf80e88a13576f744dcd5b90abd6ffca18

Reason

config extraction: CfgExtr crashed: runtime error: slice bounds out of range [:43697] with capacity 32736

General

Target
df636be58c9fd0595e88738097afa0cf80e88a13576f744dcd5b90abd6ffca18
Size 180KB
Sample220124-a7wjsahaaq
SHA256 df636be58c9fd0595e88738097afa0cf80e88a13576f744dcd5b90abd6ffca18
MD5 b9e85867a6da0d9c3ea1a84153c07bb3
SHA1 f45782a10317df6328806feeab3066b0eb7e82b5
SHA512 d9e7b3c3d7360078178d30dd3be5c5fee329eb190078faf2ad762aef0828311054d5b759a910fc09210c69c63d900dd561d7d08ae9eec5a083be9ad149cfcd99
SSDEEP 1536:LW68afxpFwcfI3GswnfUSOUpgS0M7PFi4eTMluxtXDCTtTnICS4AshRnkvs0Gzim:RFgXkUSOwlLFi4eTMlwDCTuaK4WCN1
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sodinokibi

Sodinokibi/Revil sample 1 IoCs

resource	yara_rule
sample	family_sodinokobi

SHA256 df636be58c9fd0595e88738097afa0cf80e88a13576f744dcd5b90abd6ffca18
MD5 b9e85867a6da0d9c3ea1a84153c07bb3
SHA1 f45782a10317df6328806feeab3066b0eb7e82b5
SHA512 d9e7b3c3d7360078178d30dd3be5c5fee329eb190078faf2ad762aef0828311054d5b759a910fc09210c69c63d900dd561d7d08ae9eec5a083be9ad149cfcd99
SSDEEP 1536:LW68afxpFwcfI3GswnfUSOUpgS0M7PFi4eTMluxtXDCTtTnICS4AshRnkvs0Gzim:RFgXkUSOwlLFi4eTMlwDCTuaK4WCN1
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

13826

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths