General
-
Target
2024-07-01_73041d7b9a93d3cda76e2a052ac02e82_revil_sodinokibi
-
Size
102KB
-
Sample
240701-q121zsybpr
-
MD5
73041d7b9a93d3cda76e2a052ac02e82
-
SHA1
f995852f291e2c946e15d20d020bb8e8defd317f
-
SHA256
776ea636ee33aab6b2db5f46889b027c297280db37400efb091e0d4a9001a7d7
-
SHA512
6f430874949362bf2d9d29153c0f9d0e5c53ea7bf69a44cf14c2627981d87ff0ad45fb12c26223dc33ceebf57b6113db37e347b2b4b2fa7ac037a63edc209371
-
SSDEEP
3072:db+XoBHfYu9gggwgggwgggwgggwggg2k+LoS:dphvo
Behavioral task
behavioral1
Sample
2024-07-01_73041d7b9a93d3cda76e2a052ac02e82_revil_sodinokibi
Resource
ubuntu2404-amd64-20240523-en
Malware Config
Extracted
/tmp/systemd-private-2f7dc25f32a041608470b3e794ff7c76-systemd-resolved.service-0xCfsI/tmp/rhkrc-readme.txt
http://aplebzu47wgazapdqks6vrcv6zcnjppkbxbr6wketf56nf6aq2nmyoyd.onion/5BA9C4E55BA9C4E5
http://decoder.re/5BA9C4E55BA9C4E5
Targets
-
-
Target
2024-07-01_73041d7b9a93d3cda76e2a052ac02e82_revil_sodinokibi
-
Size
102KB
-
MD5
73041d7b9a93d3cda76e2a052ac02e82
-
SHA1
f995852f291e2c946e15d20d020bb8e8defd317f
-
SHA256
776ea636ee33aab6b2db5f46889b027c297280db37400efb091e0d4a9001a7d7
-
SHA512
6f430874949362bf2d9d29153c0f9d0e5c53ea7bf69a44cf14c2627981d87ff0ad45fb12c26223dc33ceebf57b6113db37e347b2b4b2fa7ac037a63edc209371
-
SSDEEP
3072:db+XoBHfYu9gggwgggwgggwgggwggg2k+LoS:dphvo
Score10/10-
Manipulates ESXi
Manipulates ESXi.
-
Enumerates running processes
Discovers information about currently running processes on the system
-