Resubmissions

25/03/2025, 13:41

250325-qzfrcswzht 10

05/02/2025, 10:51

250205-mx3lkatjgw 10

30/01/2025, 12:43

250130-pyd1ps1nby 10

Analysis

  • max time kernel
    0s
  • platform
    debian-9_armhf
  • resource
    debian9-armhf-20240611-en
  • resource tags

    arch:armhfimage:debian9-armhf-20240611-enkernel:4.9.0-13-armmp-lpaelocale:en-usos:debian-9-armhfsystem
  • submitted
    05/02/2025, 10:51

Errors

Reason
Payload did not run: payload error: fork/exec /tmp/Sodinokibi.exe: exec format error

General

  • Target

    Sodinokibi.exe

  • Size

    822KB

  • MD5

    4c811aa6fa4b6c24e325b0d71b84f710

  • SHA1

    389666ea397b3c51aeb147c8abb504c40b906d62

  • SHA256

    412e951a350b84f8c0d0a2db79029b4bbd6be624656f2a739db0fc00c6dbb52f

  • SHA512

    c33ccb7ed3c6a34d38fde8d824316012bc094abf7f62aad4472a00622500cd7a58cce43a13a26d8680d409a6a779ff36369669f97f91eea8ee50bcfd63f6fa3d

  • SSDEEP

    6144:NYk1/mCXu8BCnsq4MSt9kM5zaQrV+eXR:N/11u8BCnsq4zX5zlV+eB

Score
1/10

Malware Config

Signatures

Processes

  • /tmp/Sodinokibi.exe
    /tmp/Sodinokibi.exe dsrm -subtree -noprompt -c "user\"http://+:443\""
    1⤵
      PID:655

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads