General

  • Target

    2024-06-14_1a6748d4caca0cb533a316f02bee6fd9_avoslocker_revil

  • Size

    6.5MB

  • MD5

    1a6748d4caca0cb533a316f02bee6fd9

  • SHA1

    612327ea42ca46b373be0f6aa97a7d4749a33124

  • SHA256

    b3ffcafc0149a845fa7c2d10d8fc4f4942a9929e49036a489878e8c70ced0c2b

  • SHA512

    16cd8302c35332ca01e96f959367311cd4a993ad7bd1a2381caf825aa612f50b5a59c32454c1771d7e319d638ad144f1af18b758a7a5496186642b294acca40e

  • SSDEEP

    98304:LI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6d+YbET:LAH6aff4+4p84yjRyBNx5GET

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_1a6748d4caca0cb533a316f02bee6fd9_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections