00d638139761ac1d8ec1d2aeb2dcb0d044f65d23af6e39bd6d41069b7b0c79f5
The presence of the SHA256 hash 00d638139761ac1d8ec1d2aeb2dcb0d044f65d23af6e39bd6d41069b7b0c79f5
is a critical indicator of potential malware infection, specifically linked to observed activity associated with the REvil ransomware (also known as Sodinokibi). This hash has been flagged by multiple threat intelligence feeds, including SOCRadar and AlienVault OTX, and exhibits a high threat score, indicating a high likelihood of malicious activity. The numerous related objects, including executable files and network indicators associated with Avast, Google Analytics, and various IP addresses, suggest a potential compromise involving injected or bundled malware designed to operate covertly, collect system information, and establish command and control, ultimately potentially leading to ransomware deployment and data exfiltration. Immediate investigation is warranted to prevent further propagation and mitigate potential damage.
Summary
Top Classifications
Feed Sources
Threat Activity Timeline
Stay ahead with proactive cyber threat warnings
Discover how SOCRadar's all-in-one platform can help protect your digital assets with extended threat intelligence, digital risk protection, and attack surface management.