Talk to sales
Managed
XDR
Reports
/
vtdl__b4r7_6_
vtdl__b4r7_6_ (Sodinokibi) — malware analysis report
File info
Filename
vtdl__b4r7_6_
File type
PE32 executable (GUI) Intel 80386, for MS Windows
File size
348 KB
First seen
2024-09-25 18:47
Last seen
2024-09-25 18:47
Environment
win7/x86 en
Hashes
SHA1
0731606ab947c8d207330ef5f59312806383a5d6
SHA256
29c10c539487d5016609ee09894d91201f589a1f37da730f2e219502d62feac6
MD5
f57ed476cf10eb3fa0d3c245571e5a86
Malwares
Sodinokibi
Signatures
Defense Evasion
T1027.002
packer_entropy: Probably contains compressed or encrypted data
Other
yara_rules: Static rules
no_graphical_activity: No graphic activity
Related reports
wannacry_disarmed.exe — Sodinokibi
c-windows-d86z10hc.exe — Sodinokibi
vtdl_1787566504_3dpmcx2z — Sodinokibi, REvil
vtdl_1787564783_7lcp_nxw — Dharma, Sodinokibi, Hermes
c-windows-dwu1b1la.exe — Sodinokibi, REvil
← Previous report
Next report →