General

  • Target

    2024-03-11_c28e28ba662c47b9e9b0fb45e5ab3cf9_revil

  • Size

    123KB

  • MD5

    c28e28ba662c47b9e9b0fb45e5ab3cf9

  • SHA1

    d8be3c256684eff517c0e5f8eb7bb54ba4c4f015

  • SHA256

    1dfd6a76e316dab395e617ea76aab95dab4666b4529ef872d963087bb4651e36

  • SHA512

    e1868a66024a1ceac3a436492fb7e9b88e523598395ef7366c8e86c1d8f5b089e8e3ca5b15500206d4fe0389778c876e197351383606309c7fca11266836f615

  • SSDEEP

    1536:7DvcP3LThpshwV+5OE8yNcOQp+2ZZICS4AIjnBR561lQVMr3IgmffEbjQFOxF:y4SVjaNcOM8gnBR5uiV1UvQFOxF

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-03-11_c28e28ba662c47b9e9b0fb45e5ab3cf9_revil
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections