Talk to sales
Managed
XDR
Reports
/
vtdl_1742583082_i0f14lel
vtdl_1742583082_i0f14lel (Sodinokibi) — malware analysis report
File info
Filename
vtdl_1742583082_i0f14lel
File type
PE32 executable (GUI) Intel 80386, for MS Windows
File size
338.5 KB
First seen
2025-03-21 18:57
Last seen
2025-03-21 18:57
Environment
win7/x86 en
Hashes
SHA1
4dedacfeeef13f897a60eb634d4b6da65d9dd42e
SHA256
8298f4a5f9b55ecf937b1ae41d067b5819d22406e470541d18ba58beaee8a916
MD5
ce432fe0f6930c93ad5831424fe731e8
Malwares
Sodinokibi
Signatures
Defense Evasion
T1027.002
packer_entropy: Probably contains compressed or encrypted data
Other
yara_rules: Static rules
no_graphical_activity: No graphic activity
Related reports
packer_6.exe. — Sodinokibi, REvil
f.exe.exe — Sodinokibi, REvil
0000004_carved.pdf — Cobalt Strike, Sodinokibi, Dtrack, Poison Ivy
d2ca509fa08758736aff9abb54b5c6183130f25e6ca91bbd6e6464d2f0597f83_kreuk — Sodinokibi
e0ae340425fbb9afd4a463345d1fb470bd81110c4ae6a89f1727a8307a4070db_kreuk — Sodinokibi
← Previous report
Next report →