General

  • Target

    b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03

  • Size

    1.6MB

  • MD5

    24860bd8364aef9a3be5c26910f51b1e

  • SHA1

    05819ca983452b9795fdbc21274720c7355d89e6

  • SHA256

    b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03

  • SHA512

    353a724bf9d7f0c62152db8060f6ad03f72cceeb9230dc7e514f2a2ab3ea0fd61c997c44084d0a95d6bb2b4aee078c577c82594a09589320b522c3dfe578c359

  • SSDEEP

    49152:XgGWQaAAZ4HEYKVxH1XvK3r6EQG3ad2VbFXT5XQ1:Yd4EYCXvK3WBH2jD5A1

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b3b0faf2f8ad5b902137dfdbfb185c45c3637d139af45c50ef6fdcb09073bb03
    .exe windows:6 windows x64

    ffccf64b9d81857c220fb80699f7b005


    Headers

    Imports

    Sections