General

  • Target

    2024-06-14_04c48bf66f4af0b74f151a398e31b626_avoslocker_revil

  • Size

    6.4MB

  • MD5

    04c48bf66f4af0b74f151a398e31b626

  • SHA1

    4f231f0933364e7c5f8974f260294923836355bf

  • SHA256

    fe016ff724000dfb7ef733458b5fef61c018b1093c895de9d7dd3aa064b1453f

  • SHA512

    29689ef068ac42987c2a28c9583a6bd3ad8c0ee34f3e659cc6c44e9f1b0c29f4123cd1338f09c00e6d979d4315d3940bb66cad3c52a134b123a0c4d69e8dcdbf

  • SSDEEP

    98304:6I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6d+Ybr:6AH6aff4+4p84yjRyBNx5G

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_04c48bf66f4af0b74f151a398e31b626_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections