Errors

Reason
config extraction: sodinokibi: invalid character 'Z' looking for beginning of value

General

  • Target

    d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482

  • Size

    357KB

  • MD5

    112e09468511348fc4eb4b6c57d154a8

  • SHA1

    7f0e0dffba710f6066b6cfdd8bfcff1b40129c41

  • SHA256

    d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482

  • SHA512

    4860bf55a910228131a138e5358a6c68f22306acd3703e177c9dc49cd3b1e55bc49380891db5083af82488d57e0e01c374a1631385624770dde8c3c8ebdff516

  • SSDEEP

    6144:JvGW4PMOHBiPS7RRAmaCsuagP2tX6FF2bnWJ/gIF+lmL:JvGW4tmGsRgPYOF2kYIO

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Sodinokibi/Revil sample 1 IoCs

Files

  • d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482
    .exe windows x86


    Code Sign

    Headers

    Sections