General

  • Target

    2024-05-20_3e6bb134fe7f8e7176225e54144ea3ac_avoslocker_revil

  • Size

    6.5MB

  • MD5

    3e6bb134fe7f8e7176225e54144ea3ac

  • SHA1

    ed08ec39aef1e8a2ef3edf89594a9931a6bbee54

  • SHA256

    2e62f8b33235e2861db7a7fa0f9edb28e6ced141b976a8431d91738939633413

  • SHA512

    e44bcb6247b7dacdc7309a9d2d3bc3cd32307e334c7cb183c0da6301fd78afc4e7184eefd9acee261e8ded0f118db0666c709a8b908c865a3adb7e8e3ca0c8c4

  • SSDEEP

    98304:TI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ5:TAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_3e6bb134fe7f8e7176225e54144ea3ac_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections