General

  • Target

    2024-06-14_201718700437b3c8a2bfa4d4e034131b_avoslocker_revil

  • Size

    6.5MB

  • Sample

    240614-k87csatgnh

  • MD5

    201718700437b3c8a2bfa4d4e034131b

  • SHA1

    832e367397610d008fcb29874b592c0e8cae6488

  • SHA256

    63d9b210c8448f6ce1e795c827194c80a65ed093729fb201e5a11ecb30c6b5ba

  • SHA512

    130743f1216f62270efef7dc37ad15612ae16d1728cf5eb16367b5b8a19391cd7d6d72895506c5bd34922489c21e912511314fcc57f851c2958c2cef795b9550

  • SSDEEP

    98304:JI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQdV:JAH6aff4+4p84yjRyBNxqQr

Score
10/10

Malware Config

Targets

    • Target

      2024-06-14_201718700437b3c8a2bfa4d4e034131b_avoslocker_revil

    • Size

      6.5MB

    • MD5

      201718700437b3c8a2bfa4d4e034131b

    • SHA1

      832e367397610d008fcb29874b592c0e8cae6488

    • SHA256

      63d9b210c8448f6ce1e795c827194c80a65ed093729fb201e5a11ecb30c6b5ba

    • SHA512

      130743f1216f62270efef7dc37ad15612ae16d1728cf5eb16367b5b8a19391cd7d6d72895506c5bd34922489c21e912511314fcc57f851c2958c2cef795b9550

    • SSDEEP

      98304:JI9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQdV:JAH6aff4+4p84yjRyBNxqQr

    Score
    8/10
    • Drops file in Drivers directory

    • Executes dropped EXE

    • Checks installed software on the system

      Looks up Uninstall key entries in the registry to enumerate software on the system.

    • Drops desktop.ini file(s)

MITRE ATT&CK Enterprise v15

Tasks