General
-
Target
2024-07-01_707009f5555115354ccb5a3b759e7a69_revil_sodinokibi
-
Size
102KB
-
Sample
240701-lhsx5stfkc
-
MD5
707009f5555115354ccb5a3b759e7a69
-
SHA1
40d8a0b3970ce4ccb2ec2b165c5253708ee928ca
-
SHA256
11fd806cd4c320bca9dc958b2dac04e43691242421db878f266a9a5b09e12240
-
SHA512
fd1d419377dfddc15c4dbf3c493e7dee33d8b4fef5cc510694f8f4bb263953f08d8464a6bcabbeb367b048e9a8237eb6191751a9e83ecd9ea3eabb780bc60ac7
-
SSDEEP
3072:db+XoBHfYu9gggwgggwgggwgggwgggfk+LoS:dpkvo
Behavioral task
behavioral1
Sample
2024-07-01_707009f5555115354ccb5a3b759e7a69_revil_sodinokibi
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Extracted
/tmp/systemd-private-b594e7bbd978436eb43cb4aab7472fe8-systemd-oomd.service-RQPTru/tmp/rhkrc-readme.txt
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/B65CB189B65CB189
http://decoder.re/B65CB189B65CB189
Targets
-
-
Target
2024-07-01_707009f5555115354ccb5a3b759e7a69_revil_sodinokibi
-
Size
102KB
-
MD5
707009f5555115354ccb5a3b759e7a69
-
SHA1
40d8a0b3970ce4ccb2ec2b165c5253708ee928ca
-
SHA256
11fd806cd4c320bca9dc958b2dac04e43691242421db878f266a9a5b09e12240
-
SHA512
fd1d419377dfddc15c4dbf3c493e7dee33d8b4fef5cc510694f8f4bb263953f08d8464a6bcabbeb367b048e9a8237eb6191751a9e83ecd9ea3eabb780bc60ac7
-
SSDEEP
3072:db+XoBHfYu9gggwgggwgggwgggwgggfk+LoS:dpkvo
Score10/10-
Manipulates ESXi
Manipulates ESXi.
-
Enumerates running processes
Discovers information about currently running processes on the system
-