General

  • Target

    2024-05-25_ebc6a6b4aee137d3ae304658cb961f6b_avoslocker_revil

  • Size

    6.5MB

  • MD5

    ebc6a6b4aee137d3ae304658cb961f6b

  • SHA1

    11d3187ff5211edcfe7abd9d0832c69e7758dc1a

  • SHA256

    1ee86aaf31d4e0823abddc36eb82bfc6c5041695cb396d2fc72abe4022295c07

  • SHA512

    150bea865e3ffc38db42d4f4fc46cb197ff0a4a80716498d9b234df22b3733d1e4713b940d231d4f2b86f5175fe5f24fdfa5f349d0a585527337bc26e8be20c5

  • SSDEEP

    98304:gI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:gAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-25_ebc6a6b4aee137d3ae304658cb961f6b_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections