Overview

overview

7

Static

static

3

2024-06-11...il.exe

windows7-x64

7

2024-06-11...il.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2024-06-11_b5c315e18a1ee2f187522b649f19e96f_avoslocker_revil

  • Size

    4.5MB

  • Sample

    240611-kllska1bkf

  • MD5

    b5c315e18a1ee2f187522b649f19e96f

  • SHA1

    c284bdf2f6d0d97a521d49b7120692e8a0edc066

  • SHA256

    383a4c6546725f2a865475a56ebc87a83c76021acba356e46217872fb431daa8

  • SHA512

    782ab86e93529097aa652ce45d72e87c7b3b93db5b68936d4da1691b33bd6cb7d5168ba0da58336a6cd4aa3ad7ffe9a68bb88b5645a815a2de535de2f8ee75af

  • SSDEEP

    49152:pwpZHcs1c7tbkFoi5SAa2sr/dxZxS3SCybXPvIzMTUhDddpokCsqZWXS+hf+6T4I:I1cyy6Sz2c/dhSwvIzMwh9o9b2husrb

Score
7/10
spywarestealer

Malware Config

Targets

    • Target

      2024-06-11_b5c315e18a1ee2f187522b649f19e96f_avoslocker_revil

    • Size

      4.5MB

    • MD5

      b5c315e18a1ee2f187522b649f19e96f

    • SHA1

      c284bdf2f6d0d97a521d49b7120692e8a0edc066

    • SHA256

      383a4c6546725f2a865475a56ebc87a83c76021acba356e46217872fb431daa8

    • SHA512

      782ab86e93529097aa652ce45d72e87c7b3b93db5b68936d4da1691b33bd6cb7d5168ba0da58336a6cd4aa3ad7ffe9a68bb88b5645a815a2de535de2f8ee75af

    • SSDEEP

      49152:pwpZHcs1c7tbkFoi5SAa2sr/dxZxS3SCybXPvIzMTUhDddpokCsqZWXS+hf+6T4I:I1cyy6Sz2c/dhSwvIzMwh9o9b2husrb

    Score
    7/10
    spywarestealer

    • Executes dropped EXE

    • Loads dropped DLL

    • Reads user/profile data of web browsers

      Infostealers often target stored browser data, which can include saved credentials etc.

      spywarestealer

    • Drops file in System32 directory

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks