General

  • Target

    2024-06-12_2064ef527e12bcbe467ba9148dd5b907_revil_sodinokibi

  • Size

    156KB

  • MD5

    2064ef527e12bcbe467ba9148dd5b907

  • SHA1

    30f495e281ecfcf95f1bebde8c9d8e486c14a2ed

  • SHA256

    c5815fb72035e77992ae38151ce02635ec21ef53c44c22403b6c426bc6695025

  • SHA512

    ecc284817cdcc8ce975f1bee977f67c9ae60e2c3d4b3efe51353fc43f5f4ca19f0fde5412b0fab83c46f23fc5d0ac0f115e3389cd60d78a2825502e8b6a4f35b

  • SSDEEP

    1536:LVlo4vFAPi8hnuy8Ey7pAe3U7Pbi4eTMluxtXDCntTnICS4A33eKWKOgwoAN61Vj:Ui8Iy8EytSLbi4eTMlwDCnuZ3N9w0IE

Score
10/10

Malware Config

Signatures

  • Sodinokibi family
  • Sodinokibi/Revil sample 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-12_2064ef527e12bcbe467ba9148dd5b907_revil_sodinokibi
    .exe windows:5 windows x86 arch:x86


    Headers

    Sections