General

  • Target

    2024-06-14_b6edbb7c1852f54372a5dd6078f12e40_avoslocker_revil

  • Size

    6.5MB

  • MD5

    b6edbb7c1852f54372a5dd6078f12e40

  • SHA1

    9f5efa15af87f651983ecaa91e6ae30088095f1d

  • SHA256

    e47c86c0095b38025c277c2bfa531eca044c792cf2f553a2c27730e9438749f0

  • SHA512

    90af8d8e536fafc0d1ca3feac14d51e22d456e8ea918f8d905befbeb390ab548ce19aa2a502fcb592d4c3e158604253eefe79a942bd0b29c71483883d5397f13

  • SSDEEP

    98304:zche4hvsjnWtSfxZu3WTQwFcgdxUFZ9LWEDctV5jIfB4nkmLXzYb9:zSvsjnWcfxZu6LFUZWEDct8BOFG9

Score
10/10

Malware Config

Signatures

  • Detects executables manipulated with Fody 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-06-14_b6edbb7c1852f54372a5dd6078f12e40_avoslocker_revil
    .exe windows:4 windows x86 arch:x86

    f34d5f2d4577ed6d9ceec516c1f5a744


    Headers

    Imports

    Sections