General

  • Target

    2024-05-22_d688c21c548c567c46ec5fe585fd34f6_avoslocker_revil

  • Size

    6.5MB

  • MD5

    d688c21c548c567c46ec5fe585fd34f6

  • SHA1

    9352a95b0e887419f939ad3ada326652cc410543

  • SHA256

    0847f972e4be0c16d83cb8f58688f2aa6dcb8aef9b3909755a93f435c771900e

  • SHA512

    0489dd0142d959fc9764612d0f9bffd5fea98a6e36daa08447b4439097360cc9dadb1c4ae45c6644cb5f4e8feb09033e7ae4cd0fa165b465c0a2e959e247e340

  • SSDEEP

    98304:+I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:+AH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_d688c21c548c567c46ec5fe585fd34f6_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections