sodinokibi | 2024-06-12_2064ef527e12bcbe467ba9148dd5b907_revil_sodinokibi

General

Target
2024-06-12_2064ef527e12bcbe467ba9148dd5b907_revil_sodinokibi
Size 156KB
Sample240612-lpkkcateln
SHA256 c5815fb72035e77992ae38151ce02635ec21ef53c44c22403b6c426bc6695025
MD5 2064ef527e12bcbe467ba9148dd5b907
SHA1 30f495e281ecfcf95f1bebde8c9d8e486c14a2ed
SHA512 ecc284817cdcc8ce975f1bee977f67c9ae60e2c3d4b3efe51353fc43f5f4ca19f0fde5412b0fab83c46f23fc5d0ac0f115e3389cd60d78a2825502e8b6a4f35b
SSDEEP 1536:LVlo4vFAPi8hnuy8Ey7pAe3U7Pbi4eTMluxtXDCntTnICS4A33eKWKOgwoAN61Vj:Ui8Iy8EytSLbi4eTMlwDCnuZ3N9w0IE
MD5 SHA1 SHA512 SSDEEP

Score

10^/10

sodinokibi

Sodinokibi/Revil sample 1 IoCs

resource	yara_rule
sample	family_sodinokobi

Unsigned PE 1 IoCs

Checks for missing Authenticode signature.

resource
2024-06-12_2064ef527e12bcbe467ba9148dd5b907_revil_sodinokibi

SHA256 c5815fb72035e77992ae38151ce02635ec21ef53c44c22403b6c426bc6695025
MD5 2064ef527e12bcbe467ba9148dd5b907
SHA1 30f495e281ecfcf95f1bebde8c9d8e486c14a2ed
SHA512 ecc284817cdcc8ce975f1bee977f67c9ae60e2c3d4b3efe51353fc43f5f4ca19f0fde5412b0fab83c46f23fc5d0ac0f115e3389cd60d78a2825502e8b6a4f35b
SSDEEP 1536:LVlo4vFAPi8hnuy8Ey7pAe3U7Pbi4eTMluxtXDCntTnICS4A33eKWKOgwoAN61Vj:Ui8Iy8EytSLbi4eTMlwDCnuZ3N9w0IE
MD5 SHA1 SHA512 SSDEEP

Minor OS version

1

Major OS version

5

Entry point

12276

Magic Number

267

Subsystem

IMAGE_SUBSYSTEM_WINDOWS_GUI

DLL Characteristics

IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE

File Characteristics

IMAGE_FILE_RELOCS_STRIPPED IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE

PDB paths