Behavioral task
behavioral1
Sample
a322b230a3451fd11dcfe72af4da1df07183d6aaf1ab9e062f0e6b14cf6d23cd
Resource
ubuntu1804-amd64-20221111-en
ubuntu-18.04-amd64
0 signatures
150 seconds
General
-
Target
10720996837.zip
-
Size
36KB
-
MD5
cf5445318cc8fb5dcc080a98092ea918
-
SHA1
7a6fb3af2404f36810d8fc2dffe41b61350adcd6
-
SHA256
c31f2aad3e0e00d5fe09571d3a82663025da6715974807b7763bb22d6907f1df
-
SHA512
ac24da0e3719dc4a469908ae4c0dff7f5bac3e4584fabd748d236efd35c3852ce3997073d04e50575e3410dda7c4f899088f0b6645249c433c96b434de627506
-
SSDEEP
768:b5GTdy4MrmfXf/aVrLhGVX8StDVzX/3l3WtEPaCR4Pfs+s:cAZRVLktD9vl3sEPaC6Ps
Score
10/10
Malware Config
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil Elf 1 IoCs
Processes:
resource yara_rule static1/unpack001/a322b230a3451fd11dcfe72af4da1df07183d6aaf1ab9e062f0e6b14cf6d23cd family_sodinokobi_elf
Files
-
10720996837.zip.zip
Password: infected
-
a322b230a3451fd11dcfe72af4da1df07183d6aaf1ab9e062f0e6b14cf6d23cd.elf linux x64