Behavioral task
behavioral1
Sample
Revil_1.1c
Resource
ubuntu2204-amd64-20240522.1-en
ubuntu-22.04-amd64
5 signatures
150 seconds
Behavioral task
behavioral2
Sample
Revil_1.1d
Resource
ubuntu1804-amd64-20240611-en
ubuntu-18.04-amd64
5 signatures
150 seconds
Behavioral task
behavioral3
Sample
Revil_1.2a
Resource
ubuntu2004-amd64-20240508-en
ubuntu-20.04-amd64
0 signatures
150 seconds
General
-
Target
e1daf37cf37b5bf55d847618b55a6b60c098d0091c10be5f12c5b54f8595457e
-
Size
96KB
-
MD5
d1294072b23e8c394b2c1abebc42550c
-
SHA1
efc45422a95e29c8d4fac74dc8770847ecb48e8a
-
SHA256
e1daf37cf37b5bf55d847618b55a6b60c098d0091c10be5f12c5b54f8595457e
-
SHA512
4b772d03e88a14dd0f9ea601d489096e7bd0cf704d7cca87592cc1db071f08496f89070dfb5e832942b1cb41c3c5402b6fb33488db17359f4bacb3aaf9317c02
-
SSDEEP
1536:QwH1/1IVJ+5p5FBzshdhL4ElaDTZIdbjfhMYH+qKcZxiODlu3Ymd6yCMyxw3k:nH1ysB4hbLp+TZId3fhMsiOBuH6QU
Score
10/10
Malware Config
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil Elf 3 IoCs
resource yara_rule static1/unpack001/Revil_1.1c family_sodinokobi_elf static1/unpack001/Revil_1.1d family_sodinokobi_elf static1/unpack001/Revil_1.2a family_sodinokobi_elf
Files
-
e1daf37cf37b5bf55d847618b55a6b60c098d0091c10be5f12c5b54f8595457e.zip
Password: infected
-
Revil_1.1c.elf linux x64
-
Revil_1.1d.elf linux x64
-
Revil_1.2a.elf linux x64