Sure looks like someone's pirating the REvil ransomware, tweaking the binary in a hex editor for their own crimes