General

  • Target

    2024-04-09_c6e9e178679c17aa780b606835208e6e_revil

  • Size

    123KB

  • MD5

    c6e9e178679c17aa780b606835208e6e

  • SHA1

    0f681a50eca44dd01d27c43f33c45a1fec855a4b

  • SHA256

    5792edeeadea207b2331c58f6c8e87eb19d7fd8ee9244b770c86e51ae1bff036

  • SHA512

    48721d906be8543ed802ab4eed77d834b2e615fbaf66a9793aee24d284a2812a49b0a5a32b802c56eacd85ab7bb6b28cacfe44a2d040e8f12dc392cd1c57ddc1

  • SSDEEP

    1536:7DvcP3LThpshwVs5OE8yCcYQp+2ZZICS4AIjnBR561lQVMr3IgmffEbjQFOxP:y4SVhaCcYM8gnBR5uiV1UvQFOxP

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-04-09_c6e9e178679c17aa780b606835208e6e_revil
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections