Overview

overview

10

Static

static

10

2024-12-14...bi.exe

windows7-x64

10

2024-12-14...bi.exe

windows10-2004-x64

10

2024-12-14...bi.exe

android-10-x64

2024-12-14...bi.exe

android-13-x64

2024-12-14...bi.exe

macos-10.15-amd64

2024-12-14...bi.exe

ubuntu-18.04-amd64

2024-12-14...bi.exe

debian-9-armhf

2024-12-14...bi.exe

debian-9-mips

2024-12-14...bi.exe

debian-9-mipsel

Resubmissions

05-02-2025 10:44

250205-mtb97svjfl 10

14-12-2024 12:52

241214-p4hk3stqgl 10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240729-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240729-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    05-02-2025 10:44

Sharing

Copy URL
Twitter E-mail

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/2024-12-14_b3b9befbd8753ac8dab26e4d4e5727f6_revil_sodinokibi.exe: exec format error
Report Analysis Logs

General

  • Target

    2024-12-14_b3b9befbd8753ac8dab26e4d4e5727f6_revil_sodinokibi.exe

  • Size

    143KB

  • MD5

    b3b9befbd8753ac8dab26e4d4e5727f6

  • SHA1

    18e1221cf431f52310f5c459bbb013600e8d55ce

  • SHA256

    c293a4033debde88239a7dfbb5fdce91da96dafeccbeb785a7cf83c7aa769091

  • SHA512

    0bbdb8746193370e3dab8dbf5442112b217ea07b57aabb8cc550a4b270e84b33e49f314d0db53f5aa5571746d33ac790e424479f558bfc7255cd6b8a94508642

  • SSDEEP

    3072:2D5BbEKoxWlcLbi4eTMlwDCnu/YGB96W/y1cL:2DTb3UWubnWJ/RB9wcL

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/2024-12-14_b3b9befbd8753ac8dab26e4d4e5727f6_revil_sodinokibi.exe
    /tmp/2024-12-14_b3b9befbd8753ac8dab26e4d4e5727f6_revil_sodinokibi.exe dsrm -subtree -noprompt -c "user\"http://+:443\""
    1⤵
      PID:645

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads