Overview

overview

10

Static

static

10

674ad8128d...9c.exe

windows7-x64

3

674ad8128d...9c.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

Errors

Reason
config extraction: sodinokibi: invalid character 'î' looking for beginning of value

General

  • Target
    JaffaCakes118_f9360028f0313e3bf8b595aa92ddef1b21bd12e4dc79c636a11aaed160ff9b4d
  • Size 88KB
  • Sample241224-vyevwssrhm
  • SHA256 f9360028f0313e3bf8b595aa92ddef1b21bd12e4dc79c636a11aaed160ff9b4d
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
sodinokibi

Malware Config

Signatures

  • Sodinokibi family
    sodinokibi
  • Sodinokibi/Revil sample 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

File Explorer

  • JaffaCakes118_f9360028f0313e3bf8b595aa92ddef1b21bd12e4dc79c636a11aaed160ff9b4d
    .zip 88KB
  • 674ad8128d17418474a2b4615da81c935d4d7f9c.rl
    .exe 160KB

JaffaCakes118_f9360028f0313e3bf8b595aa92ddef1b21bd12e4dc79c636a11aaed160ff9b4d

  • SHA256 f9360028f0313e3bf8b595aa92ddef1b21bd12e4dc79c636a11aaed160ff9b4d
  • MD5 SHA1 SHA512 SSDEEP
Password
infected