General

  • Target

    F.I.S.TTrainer_JC.exe

  • Size

    1.2MB

  • MD5

    ca25809efffb226e8db6272c79a0645e

  • SHA1

    45eef73190893a7ed35fb5d95d0add0ad4853c7a

  • SHA256

    3ede22d7876473b896473266b5d67a8ce4077286fcbd24ecc2a0396ec61da99f

  • SHA512

    7f9ee0bd4054041b2d24801c094c0815688b3ca8de4de282e6892c5e46daf8c7b73cb62c36f867f7eab2b7e68021180170ee992957a747b498bc1aba2649c5da

  • SSDEEP

    24576:bv9Rf+jUxctbuSc5Q/0eCmKFd1bg15ZLkDDSwO7p3Ff1bJ7:b1RWUxctuV6sF01nI5O7pbV7

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • F.I.S.TTrainer_JC.exe
    .exe windows x64

    02abf7189f5ed7c76c0812186bb0e6f0


    Headers

    Imports

    Sections