General

  • Target
    2024-08-02_28b09e841121881401222a0b9d40ad7d_bkransomware_hijackloader_revil
  • Size 4.4MB
  • Sample240802-mebp5avelp
  • SHA256 3b13296be8fe3983a6cac466231d721641ed45686b0d9550fe785f97c913b6d1
  • MD5 SHA1 SHA512 SSDEEP
Score
3/10

Malware Config

Signatures

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • 2024-08-02_28b09e841121881401222a0b9d40ad7d_bkransomware_hijackloader_revil
    .exe 4.4MB

2024-08-02_28b09e841121881401222a0b9d40ad7d_bkransomware_hijackloader_revil

  • IMPHASH 12f273eea63c9ac95308781a4a77d9f8
  • SHA256 3b13296be8fe3983a6cac466231d721641ed45686b0d9550fe785f97c913b6d1
  • MD5 SHA1 SHA512 SSDEEP
  • Unsigned PE

    Checks for missing Authenticode signature.

Minor OS version
0
Major OS version
6
Entry point
4681728
Magic Number
267
Subsystem
IMAGE_SUBSYSTEM_WINDOWS_GUI
DLL Characteristics
IMAGE_DLLCHARACTERISTICS_NX_COMPAT IMAGE_DLLCHARACTERISTICS_TERMINAL_SERVER_AWARE
File Characteristics
IMAGE_FILE_EXECUTABLE_IMAGE IMAGE_FILE_32BIT_MACHINE
PDB paths
C:\Orchestra\std\17.0\bld\src\test\Win32\Release\driver_web_installer.pdb