General

  • Target

    2024-06-05_e60b2eeb32097c389c415f7c5146a53c_avoslocker_revil

  • Size

    20.0MB

  • MD5

    e60b2eeb32097c389c415f7c5146a53c

  • SHA1

    16ebecbbfd831f7836d8e3c972ec7ff3cb36f8da

  • SHA256

    0c421c3e4c18edf3d862b78b8ed5ce498ddd4db26828dde1891efef79949bf77

  • SHA512

    f9005674ae263bbee3e00012e781a7d6220c96ad342b6bb4247006e09ee6389d17f346997b060adb2d36369b851f9c96f882ad0fc2d1be35ca097343af2ab1ac

  • SSDEEP

    393216:FWvGqClv/JbRJrRZCgEJsv6tWKFdu9CovUAmIMEFoFfx:Yexlv/J7/UAmIMEFAfx

Score
10/10

Malware Config

Signatures

  • Detects executables packed with Themida 1 IoCs
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-05_e60b2eeb32097c389c415f7c5146a53c_avoslocker_revil
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections