General

  • Target

    2024-05-20_0299556b094581e3b68cc2f672dd01d9_avoslocker_revil

  • Size

    6.5MB

  • MD5

    0299556b094581e3b68cc2f672dd01d9

  • SHA1

    672761133a2ce341198102e170a0ea34ff02e5f1

  • SHA256

    f2d1f6c45ab7891641b6096c510d6a956af2c4df180340c67cb9a31133948eb3

  • SHA512

    817c6a50ea6b275e4e8307343126e4343b35bf6d94ea34b487a1865fb1304f06075bdc53eb4120bec271f8fb75160a8e3bee7dad81c75eb3354e1eea4e9889fa

  • SSDEEP

    98304:OI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:OAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_0299556b094581e3b68cc2f672dd01d9_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections