General

  • Target

    2024-05-29_8a788fc1082921092f695420b97f84df_avoslocker_revil

  • Size

    6.5MB

  • MD5

    8a788fc1082921092f695420b97f84df

  • SHA1

    ed0539dab43e8385f733e64d7a6bf53e354ef79b

  • SHA256

    e7e03cfd688c577306276d6bcb44f179a6bb97bdb8be0646058c21345db5de46

  • SHA512

    e71d6e65ebac2316e770e76aa0578de224ca9ecece022a5d2909cf688d0538d348f22ca7f464929b4bc30f81edfa20184e0e616e272a6d8f3e51e99782432bc8

  • SSDEEP

    98304:6I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:6AH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-05-29_8a788fc1082921092f695420b97f84df_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections