General

  • Target

    2024-06-14_28e83d675d40afd18e3159b0f82130c4_avoslocker_revil

  • Size

    6.5MB

  • MD5

    28e83d675d40afd18e3159b0f82130c4

  • SHA1

    902b1fb1d946e6aa2bcca27b4746c0fc59f82662

  • SHA256

    f59d32ab7fa90ccadd961903a136f2f64ce3dbe642062fc397b63b31f8e03c16

  • SHA512

    0c6e724969627796dd5aa291f4123f8ddd4a10e3b1d54ea223680d4e260f5bab155306955f735fbfb270a6d61c3d0b7c7522fa5ce584276b057c3d74f2f581a9

  • SSDEEP

    98304:3I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6dtQ:3AH6aff4+4p84yjRyBNxqQ

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_28e83d675d40afd18e3159b0f82130c4_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections