Overview

overview

10

Static

static

10

efa6b6fc32...bd.exe

windows7-x64

1

efa6b6fc32...bd.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    efa6b6fc32c6727867a6ea4d8339b7bebf2185e5d8df8000031433156b59f1bd

  • Size

    1.7MB

  • MD5

    b8c323e036e199312402158eb3aee8e8

  • SHA1

    37e4d07af31a7d6d074e67531c6c1ed1ae392116

  • SHA256

    efa6b6fc32c6727867a6ea4d8339b7bebf2185e5d8df8000031433156b59f1bd

  • SHA512

    866ed57a5163121b7f5e386fca885c255a0f0d720402c3f44a15c0bf0447085c5368f8d1737e78ef557cb221974de32c32eb68207a94379ff0cd9f847c8bdf27

  • SSDEEP

    24576:u/aX4CDt0ZNHjNG1z2QgT++2aNRoIUuqacvanGBDSVXT5X6ya:u/C4w0ZNJG1qQg52aNxhqbvFmXT5X61

Score
10/10
r77

Malware Config

Signatures

  • R77 family
    r77
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • efa6b6fc32c6727867a6ea4d8339b7bebf2185e5d8df8000031433156b59f1bd
    .exe windows:6 windows x64

    0768a4538089c9fb1394fecc35788a70


    Headers

    Imports

    Sections