General

  • Target

    2024-03-08_f59e62a0a8826d18e2e97524c616964e_revil

  • Size

    123KB

  • MD5

    f59e62a0a8826d18e2e97524c616964e

  • SHA1

    c30af7c6efd3fb0fe9c4db8628803b28a3203ea1

  • SHA256

    83f66a577c072841e58cd4e7b0b4df7beda619766a2b820db01d6968975bfb69

  • SHA512

    b71352a89504b037c033fdf1a2dcb4b558571dbecf52f50ce4c25b2a9b4ba9e403de3b5449ca7f7c72578cfe64f26baf586fdf9e4848c0f1728853e9100ff9b4

  • SSDEEP

    1536:7DvcP3nThpshPVs5OE8yNcYQp+2ZZICS4AIjnBR561lQVMr3IgmffEbjQFOxi:yEFVhaNcYM8gnBR5uiV1UvQFOxi

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-08_f59e62a0a8826d18e2e97524c616964e_revil
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections