Malware Analysis Report

2025-01-18 20:08

Sample ID 220124-bgmpmahcc7
Target c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c
SHA256 c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c
Tags
sodinokibi
score
10/10

Table of Contents

Analysis Overview

MITRE ATT&CK

Analysis: static1

Detonation Overview

Signatures

Analysis: behavioral1

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis: behavioral2

Detonation Overview

Command Line

Signatures

Processes

Network

Files

Analysis Overview

score
10/10

SHA256

c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c

Threat Level: Known bad

The file c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c was found to be: Known bad.

Malicious Activity Summary

sodinokibi

Sodinokibi family

Sodinokibi/Revil sample

MITRE ATT&CK

N/A

Analysis: static1

Detonation Overview

Reported

2022-01-24 01:07

Signatures

Sodinokibi family

sodinokibi

Sodinokibi/Revil sample

Description Indicator Process Target
N/A N/A N/A N/A

Analysis: behavioral1

Detonation Overview

Submitted

2022-01-24 01:07

Reported

2022-01-24 01:23

Platform

win7-en-20211208

Max time kernel

117s

Max time network

138s

Command Line

"C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe

"C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe"

Network

N/A

Files

memory/1580-55-0x00000000763F1000-0x00000000763F3000-memory.dmp

Analysis: behavioral2

Detonation Overview

Submitted

2022-01-24 01:07

Reported

2022-01-24 01:23

Platform

win10-en-20211208

Max time kernel

118s

Max time network

163s

Command Line

"C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe"

Signatures

N/A

Processes

C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe

"C:\Users\Admin\AppData\Local\Temp\c54df88d7d4a5237df7dbe2388e9b8dfb770d715704a435a353b4b6c67ad7d1c.exe"

Network

Files

N/A