General

  • Target

    dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1

  • Size

    1.3MB

  • MD5

    ba6b76df6cc83bc6fdb8c7cee71b694e

  • SHA1

    4f6f4a287f7eee0d33b97c743be60d04fcc3dcee

  • SHA256

    dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1

  • SHA512

    fa1f810426fe1630d8c4634d0bbbe231cb81c320624417b6c8ac726d6f24f393a8f0df4f94ae381e036f52f90a86785d71863c87e3de125bc3041be96c113b8b

  • SSDEEP

    24576:GUCKtHuvIxVv4xfO7eDVtk7hLm+JOzhImrqMyyaPDSVXT5X:rrtHuvIxVvafaeDVKLmm+ymI1sXT5X

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dc90cfc3924dd6ae9c533fd369e974fff3cc1c5ad8834405ebaf3abe469f52f1
    .exe windows:6 windows x64

    40b31c12dbd15b942e1a19aeb455510c


    Headers

    Imports

    Sections