Overview

overview

10

Static

static

10

240725-ltj...ed.zip

windows11-21h2-x64

1

2024-07-25...mi.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    240725-ltj5da1gqn_pw_infected.zip

  • Size

    86KB

  • MD5

    513bd8d5cf5016106675f2efa77d0d40

  • SHA1

    fd89b68b6fc227c19637e6c03768c4148b7b73c6

  • SHA256

    7478bc084c6aec4c5e09b1c0c52fc80786fc204e5aabaca92425291af1d141c2

  • SHA512

    05e53ac731c1959acf515a8eccd14ddc3087896dadb02d009a0e6395c9b7eacb15fedf771b5a5d39135f48e2e3f5fac69e4f20c3ab082944dd9ee81ec05b87f5

  • SSDEEP

    1536:Wq0HSwcqk6Tq6jvG1dMEfkRaReDOzW9KQQwUBV9yawtQWaigeFHXOcp3HNPpwlOI:WnFHTqIWackRa5W9ZQV/wtQWai3tBoMI

Score
10/10
sodinokibi

Malware Config

Signatures

  • Sodinokibi family
    sodinokibi
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 240725-ltj5da1gqn_pw_infected.zip
    .zip

    Password: infected

  • 2024-07-25_72d9db37db04e51f61fc7b3424a009d2_revil_wapomi
    .exe windows:5 windows x86 arch:x86

    7ecacfc6f1d64067e0047425ad885408


    Headers

    Imports

    Sections