General

  • Target

    2024-04-09_96824095206ea551e8a35edd73e76a43_revil

  • Size

    123KB

  • MD5

    96824095206ea551e8a35edd73e76a43

  • SHA1

    38aae72da34a608eb18b27cad316ba3e30204429

  • SHA256

    a647dd420a37a033c66bcc2b8cc66596dc7fb19e2850037f6fa22b431079c5ba

  • SHA512

    fa93057bd765d55d97b0c4d782d07f1463d2c2764675b58a771494a0032179054f21fda1307e034ae5695dea45969b57d73bb7bf28904b806bf951d6803ac4eb

  • SSDEEP

    1536:yDvcP3LThpshwVs5OE8yNcZQp+2ZZICS4AIjnBR561lQVMr3IgmffEbjQFOx2:l4SVhaNcZM8gnBR5uiV1UvQFOx2

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_96824095206ea551e8a35edd73e76a43_revil
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections