General

  • Target

    2024-05-20_420160c144c6fbc71e12e010a42098fc_avoslocker_revil

  • Size

    6.5MB

  • MD5

    420160c144c6fbc71e12e010a42098fc

  • SHA1

    8a71a2c33138f0d8c3693e008b51ab519ca97257

  • SHA256

    b2fd2b6d4b1904713aec6e63642f690eff9e5fd8b8d43f83567ff6104262336e

  • SHA512

    2918b9eaeb49358f3484cb102e8ad5b76c64751216d5a7e28b29dee3a20f7f7ab16cbc2ed1cfa2a8a3ed363923ff8504a8d7cf1c33bebda4aac4428b367af608

  • SSDEEP

    98304:0I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:0AH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-20_420160c144c6fbc71e12e010a42098fc_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections