Errors
Reason
config extraction: sodinokibi: invalid character '@' looking for beginning of value
General
-
Target
JaffaCakes118_2ee68560ea19925f91153c44e1ffacc2c982162fd00f330a0e40647099911b3b
-
Size
85KB
-
MD5
ecc19d19d6917bfc910071227792dd35
-
SHA1
b4f5bc9713fd1f7076c06973830d45edf142a98f
-
SHA256
2ee68560ea19925f91153c44e1ffacc2c982162fd00f330a0e40647099911b3b
-
SHA512
06a77573da21391e6cc93ab6fc6ea825989e213dcfee106e7fe043f07b9d5bc14b3ef52f2614ab8aa1eb7e244098f15cd77999c102257f16f896daa8d39fd9d0
-
SSDEEP
1536:kRL5ZPLz3eUZ4yig7ooU+h9YAi+8Nb/Io+LkbH8VWok6IfJ:2lZvOfX6Uc9Yl+kbHy5xIfJ
Score
10/10
Malware Config
Signatures
-
Sodinokibi family
-
Sodinokibi/Revil sample 1 IoCs
-
Unsigned PE 1 IoCs
Checks for missing Authenticode signature.
Files
-
JaffaCakes118_2ee68560ea19925f91153c44e1ffacc2c982162fd00f330a0e40647099911b3b
Password: infected
-
a26e215a307069487644e70164a0cd8d69b40b0c.rl
Headers
Sections