Overview

overview

10

Static

static

10

2024-06-13...bi.exe

windows7-x64

2024-06-13...bi.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    2024-06-13_55fc98bf0c0c724c70891c4eaf7544af_revil_sodinokibi
  • Size 156KB
  • Sample240613-ltp1matdja
  • SHA256 9569dd554bbecf251fa4568924a23ac13bea96c671fe8e68707557d6ac6e5e3a
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sodinokibiransomware

Malware Config

Targets

    • Target
      2024-06-13_55fc98bf0c0c724c70891c4eaf7544af_revil_sodinokibi
    • Size 156KB
    • SHA256 9569dd554bbecf251fa4568924a23ac13bea96c671fe8e68707557d6ac6e5e3a
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    sodinokibiransomware

    • Sodin,Sodinokibi,REvil

      Ransomware with advanced anti-analysis and privilege escalation functionality.

      ransomwaresodinokibi

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Enumerates connected drives

      Attempts to read the root path of hard drives other than the default C: drive.

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks