General

  • Target

    2024-05-28_b7f4a1c484d53ec07d399b88ca3c9b65_avoslocker_revil

  • Size

    6.5MB

  • MD5

    b7f4a1c484d53ec07d399b88ca3c9b65

  • SHA1

    0466017f68543349cf324182fd7fde3230f13b9e

  • SHA256

    114116eb3f95446d5c204a4b55c32f4d001a9e9741ff4af4b657a856ae6e9344

  • SHA512

    a0e5b94c9288f2f37a14b39007e18b4ecddead944157113313ca8c30e74593c811961e321bcc7790e60fc3e8af53b194b45b43f2e20e7eb3d0a2692ba8f60629

  • SSDEEP

    98304:XI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:XAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-28_b7f4a1c484d53ec07d399b88ca3c9b65_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections