General

  • Target

    2024-05-22_80071282ed477e2fa4a1c81c0473894f_avoslocker_revil

  • Size

    6.5MB

  • MD5

    80071282ed477e2fa4a1c81c0473894f

  • SHA1

    19096d26bf7ab42cf9925fb130fc3366de04febb

  • SHA256

    48fc6f1b33e6213bd6d9aefd24bb9ef4e624233f74353eee9dff8e4f15e5c61b

  • SHA512

    f75aa770deaad453089b831d00a71eab4d60e077a1e6fcf8fab1ba7fb173002fd21b6020f487ef3e8e5d17d88e8ea6d4fd3f776c097e8bb447a8c1e8afdb9584

  • SSDEEP

    98304:1I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:1AH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_80071282ed477e2fa4a1c81c0473894f_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections