General

  • Target

    2024-06-14_0df84f28489e9848bef6a395cc9e3855_avoslocker_revil

  • Size

    6.5MB

  • MD5

    0df84f28489e9848bef6a395cc9e3855

  • SHA1

    70e2a317b3381d59c11ee5e70d0a87e24094a48c

  • SHA256

    7c489d6c920ac09c3b211189c33291e2ac5ceb83e2c37d8a76f2097debb5da6f

  • SHA512

    c4388f6b3755c3c7917cb071b3b69316037da05675377a9c18763da350f94b8270a3244332c93587217f2c3b88109bab0e04e25e8168376a784ddfaf135362a1

  • SSDEEP

    98304:lche4hvsjnWtSfxZu3WTQwFcgdxUFZ9LWEDctV5jIfB4nkmLXzYbd:lSvsjnWcfxZu6LFUZWEDct8BOFG

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_0df84f28489e9848bef6a395cc9e3855_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections