General
-
Target
2024-08-25_668e3afb940f2bf11b2bd2d55adf14af_avoslocker_revil
-
Size
6.5MB
-
Sample
240825-a5996a1ajk
-
MD5
668e3afb940f2bf11b2bd2d55adf14af
-
SHA1
3b165cb9c8bd64ab0075f17b320ffbe1e2e854b8
-
SHA256
0f33c1429ba7e89a9964d541c55883f00b6b6f41aee748008614440292497e37
-
SHA512
cb86a7b16b7923121e581c899d2716ce1c22cc6c48577bde6c8b99796b1b5d115fef5e6e858359cedd98973d0ad63100220f09af4bfb065c996d374ce5ddded2
-
SSDEEP
98304:7I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6d+YbAN:7AH6aff4+4p84yjRyBNx5GA
Static task
static1
Behavioral task
behavioral1
Sample
2024-08-25_668e3afb940f2bf11b2bd2d55adf14af_avoslocker_revil.exe
Resource
win7-20240705-en
Behavioral task
behavioral2
Sample
2024-08-25_668e3afb940f2bf11b2bd2d55adf14af_avoslocker_revil.exe
Resource
win10v2004-20240802-en
Malware Config
Targets
-
-
Target
2024-08-25_668e3afb940f2bf11b2bd2d55adf14af_avoslocker_revil
-
Size
6.5MB
-
MD5
668e3afb940f2bf11b2bd2d55adf14af
-
SHA1
3b165cb9c8bd64ab0075f17b320ffbe1e2e854b8
-
SHA256
0f33c1429ba7e89a9964d541c55883f00b6b6f41aee748008614440292497e37
-
SHA512
cb86a7b16b7923121e581c899d2716ce1c22cc6c48577bde6c8b99796b1b5d115fef5e6e858359cedd98973d0ad63100220f09af4bfb065c996d374ce5ddded2
-
SSDEEP
98304:7I9tiSH6a6gfFCZ8th/yp3qvZ4ypOKRxoBBTxBQk6d+YbAN:7AH6aff4+4p84yjRyBNx5GA
Score8/10-
Drops file in Drivers directory
-
Executes dropped EXE
-
Checks installed software on the system
Looks up Uninstall key entries in the registry to enumerate software on the system.
-
Drops desktop.ini file(s)
-