General

  • Target

    2024-06-05_4d665a514db3852e43d704c5e8df3f28_avoslocker_revil

  • Size

    6.5MB

  • MD5

    4d665a514db3852e43d704c5e8df3f28

  • SHA1

    2462caaf8499f7db0fe19074cdc00fb1485f152d

  • SHA256

    391788b358aef0847cc961154eb5e96d7d7a09cca711c4ef33ebd7e17c3c4574

  • SHA512

    68285fa6d4c1aa26e9ed9cf9c2c99486c4a3f1fa1c527daa586e402a4e316d125812f7186c759d865f34af8211ae04a238d49b6958654a880c01128e9387ebcd

  • SSDEEP

    98304:BI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:BAH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-05_4d665a514db3852e43d704c5e8df3f28_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections