sodinokibi | d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482

Reason

config extraction: sodinokibi: invalid character 'Z' looking for beginning of value

General

Target
d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482
Size 357KB
Sample220124-bbdjrshagn
SHA256 d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482
MD5 112e09468511348fc4eb4b6c57d154a8
SHA1 7f0e0dffba710f6066b6cfdd8bfcff1b40129c41
SHA512 4860bf55a910228131a138e5358a6c68f22306acd3703e177c9dc49cd3b1e55bc49380891db5083af82488d57e0e01c374a1631385624770dde8c3c8ebdff516
SSDEEP 6144:JvGW4PMOHBiPS7RRAmaCsuagP2tX6FF2bnWJ/gIF+lmL:JvGW4tmGsRgPYOF2kYIO
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sodinokibi

Sodinokibi/Revil sample 1 IoCs

resource	yara_rule
sample	family_sodinokobi

SHA256 d5d6975b713047fc1050762b4f4d8d8225647c147ccd2d51bfc1704f68c3d482
MD5 112e09468511348fc4eb4b6c57d154a8
SHA1 7f0e0dffba710f6066b6cfdd8bfcff1b40129c41
SHA512 4860bf55a910228131a138e5358a6c68f22306acd3703e177c9dc49cd3b1e55bc49380891db5083af82488d57e0e01c374a1631385624770dde8c3c8ebdff516
SSDEEP 6144:JvGW4PMOHBiPS7RRAmaCsuagP2tX6FF2bnWJ/gIF+lmL:JvGW4tmGsRgPYOF2kYIO
MD5 SHA1 SHA512 SSDEEP

windows x86

Minor OS version

Major OS version

Entry point

14054

Magic Number

267

Subsystem

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_DYNAMIC_BASE IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths