General

  • Target

    2024-05-22_fb44f1bf39a800e2a4c07ef18bba7770_avoslocker_revil

  • Size

    6.5MB

  • MD5

    fb44f1bf39a800e2a4c07ef18bba7770

  • SHA1

    8948ff2859324761e063a39655d1ddd5cde303ab

  • SHA256

    4832a3b37ff7728bd0a2f393a2e3059507d82eeb9c642c3fc60e6fffd699c2ca

  • SHA512

    8f8d2c2de9fccb845a0e9c61c745d5d03860e466045d8177fa52e14863fd7a7c2d29574fd50ea79c182e38f07d3fd8a89023670225418dc683fa24663e51d8f9

  • SSDEEP

    98304:4I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQr:4AH6aff4+4p84yjRyBNxqQr

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-22_fb44f1bf39a800e2a4c07ef18bba7770_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections