General
-
Target
2024-05-22_707dcb12658071e81c002a208de3c91e_avoslocker_revil
-
Size
6.5MB
-
Sample
240522-b8ajdagf7y
-
MD5
707dcb12658071e81c002a208de3c91e
-
SHA1
8398ad3a71188f6f530de0e426acb4246be56c0e
-
SHA256
da9725d157e88b0ec3d7aa36ee0093dea859273922017af44b091ad692bb67ba
-
SHA512
6588cf2b79e50bb9df6e753394c5f1e87b6a1d57b2070a46c121c0439abfbee47b09d327ad833a567b63ba17250fff851e96ad4c44415579e94dddb75e346a19
-
SSDEEP
98304:wI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:wAH6aff4+4p84yjRyBNxqQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_707dcb12658071e81c002a208de3c91e_avoslocker_revil.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_707dcb12658071e81c002a208de3c91e_avoslocker_revil.exe
Resource
win10v2004-20240226-en
Malware Config
Targets
-
-
Target
2024-05-22_707dcb12658071e81c002a208de3c91e_avoslocker_revil
-
Size
6.5MB
-
MD5
707dcb12658071e81c002a208de3c91e
-
SHA1
8398ad3a71188f6f530de0e426acb4246be56c0e
-
SHA256
da9725d157e88b0ec3d7aa36ee0093dea859273922017af44b091ad692bb67ba
-
SHA512
6588cf2b79e50bb9df6e753394c5f1e87b6a1d57b2070a46c121c0439abfbee47b09d327ad833a567b63ba17250fff851e96ad4c44415579e94dddb75e346a19
-
SSDEEP
98304:wI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:wAH6aff4+4p84yjRyBNxqQ
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-