General

  • Target

    2024-05-26_25a50e0bd9974e2fad01b81d8a143c16_avoslocker_revil

  • Size

    6.5MB

  • MD5

    25a50e0bd9974e2fad01b81d8a143c16

  • SHA1

    dd95898abd13178bd1bfe6848506d991baa4fbb9

  • SHA256

    d7be24984143b2a803e3fc4c66c45a3d9833c7ef6d21216f6c65a74721c51b74

  • SHA512

    cfafcbd288d7a7f24f8b81e59a773d32d2f7dfde999ff311a8bd09847c0b92f34ff77c28f334074e938d4adee7123404a0079d664e1269fcf65d49036dbeb627

  • SSDEEP

    98304:II9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:IAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-26_25a50e0bd9974e2fad01b81d8a143c16_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections