General
-
Target
2024-05-22_f93ad3ce854aa69dd75d7e3e260defb2_avoslocker_revil
-
Size
6.5MB
-
Sample
240522-c84ynaaa7v
-
MD5
f93ad3ce854aa69dd75d7e3e260defb2
-
SHA1
8ee806a0976dd0a265e1279c60031b5edc34d3d7
-
SHA256
26bea77f12396d3868fc718d5c32a1202c3b60b9f5df0def7003df9f719fa9b1
-
SHA512
b0af57e34290b006c8d9a982979bc6046662f9508ea48d04c6ed954351f94c3d9e5afe66699a13796d9fad52d0424c72ea630da7539995c9007b1169fb07f4a9
-
SSDEEP
98304:LI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:LAH6aff4+4p84yjRyBNxqQ
Static task
static1
Behavioral task
behavioral1
Sample
2024-05-22_f93ad3ce854aa69dd75d7e3e260defb2_avoslocker_revil.exe
Resource
win7-20240221-en
Behavioral task
behavioral2
Sample
2024-05-22_f93ad3ce854aa69dd75d7e3e260defb2_avoslocker_revil.exe
Resource
win10v2004-20240508-en
Malware Config
Targets
-
-
Target
2024-05-22_f93ad3ce854aa69dd75d7e3e260defb2_avoslocker_revil
-
Size
6.5MB
-
MD5
f93ad3ce854aa69dd75d7e3e260defb2
-
SHA1
8ee806a0976dd0a265e1279c60031b5edc34d3d7
-
SHA256
26bea77f12396d3868fc718d5c32a1202c3b60b9f5df0def7003df9f719fa9b1
-
SHA512
b0af57e34290b006c8d9a982979bc6046662f9508ea48d04c6ed954351f94c3d9e5afe66699a13796d9fad52d0424c72ea630da7539995c9007b1169fb07f4a9
-
SSDEEP
98304:LI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:LAH6aff4+4p84yjRyBNxqQ
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-