Overview

overview

10

Static

static

10

revil_sodinokibi.dll

linux_armhf

revil_sodinokibi.dll

linux_mips

revil_sodinokibi.dll

linux_mipsel

revil_sodinokibi.dll

linux_amd64

Resubmissions

16/02/2022, 11:03

220216-m52dgabfb610

15/02/2022, 20:20

220215-y4w8xabagk10

Analysis

  • max time kernel
    0s
  • platform
    linux_mips
  • resource
    debian9-mipsbe-en-20211208
  • submitted
    16/02/2022, 11:03

Sharing

Copy URL Twitter E-mail
Report Analysis Logs

Errors

Reason
platform exec: exit status 1: 2021/12/08 18:08:07 insmod stahp.ko pid=314 receiver=10.127.0.1:33789 eternalize_pid=314 2021/12/08 18:08:09 Payload error: fork/exec ./rundll32.exe: no such file or directory

General

  • Target
    revil_sodinokibi.dll
  • Size 164KB
  • Sample220216-m52dgabfb6
  • SHA256 2ca64feaaf5ab6cf96677fbc2bc0e1995b3bc93472d7af884139aa757240e3f6
  • MD5 SHA1 SHA512
Score
1/10

Malware Config

Signatures

Processes

  • ./rundll32.exe
    ./rundll32.exe "%PAYLOAD%,#1"
    1⤵
      PID:320

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads