General

  • Target

    c6b2d4fbbf93da93f60b5e74d85d60e2a78e64889f115c61684ab030c6852f67

  • Size

    1.9MB

  • MD5

    56ef1a66cf5f2306696723b1ef180c2e

  • SHA1

    6d2d60eb19783656b06e528b0627a6c6fbc26778

  • SHA256

    c6b2d4fbbf93da93f60b5e74d85d60e2a78e64889f115c61684ab030c6852f67

  • SHA512

    dc655934d92138632c4d020f5e473d869746869d979fe3fceb52e38028fd9014434aa6a6ec87b7f78fef4783bd5d0f3498deba9466c453d88cafd83931abe6f2

  • SSDEEP

    24576:7aLB4+UQ9Rp7CIC73tyDjSbOUsUsAJYULz4Lh0lhSMXlU05ioWW4Ij2c7aDDSVXX:7a1RVpxC79kUOUpYUL7v7RXT5XdECV1

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c6b2d4fbbf93da93f60b5e74d85d60e2a78e64889f115c61684ab030c6852f67
    .exe windows x64

    af1b78f2ad2478bbe2e1049b39842c26


    Headers

    Imports

    Sections