General

  • Target

    2024-01-24_80351b6d0306aca73b54557f7c160684_revil

  • Size

    166KB

  • MD5

    80351b6d0306aca73b54557f7c160684

  • SHA1

    bb4d28e45bc99e3ab09c7dd9b403dcd6eb879309

  • SHA256

    eea386a70a98c60b2cedee1ffd254c948841b167c0a05c4a4514be70cccb1a10

  • SHA512

    7ea376761231c6e6925d85de1684d1813b4218704e3086a774945930bae877097c66189862cd96fd0f15b8cd5dd7850af8bf8d636b81a014226e8213ffd47ed4

  • SSDEEP

    3072:EJMawtnGqtWoKeZC62aoNUSnc2iCRYNYJqB/p4:+w9vteQJYUocNh9T4

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-01-24_80351b6d0306aca73b54557f7c160684_revil
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections