General

  • Target

    2023-05-13_c5baecf50164376ef048646969d080d4_revil

  • Size

    122KB

  • MD5

    c5baecf50164376ef048646969d080d4

  • SHA1

    610ba6ae85414b12e509e77906d8b81f95ce8cb7

  • SHA256

    da5d73f59359d904a6c58c4940270a4ad7774ff340442f7a0eaebd2ccbc7c7fb

  • SHA512

    7c8231224b15d43a1129bb5012fb443937f9fd0153ecf223371b2d362bdb0242645655fc573a0be2d260f6629d5b109ba896c18dafbdfa187a8050376d813571

  • SSDEEP

    1536:hxOUyl20w8bVZQ40iMSO1fY+iUyQs2r8t5p1ySotICS4A6UdOgYMTLOjeW47s:hMhQNDEtb3AiPnGjeW47s

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2023-05-13_c5baecf50164376ef048646969d080d4_revil
    .exe windows x86

    f3d46e2f8717ced6d4b220e65d6ad18a


    Headers

    Imports

    Sections