General

  • Target

    ef09243baed67c2d1f62d8beff0fab077f0df0a4742df117028fe4f89cd0d5e6

  • Size

    1.5MB

  • MD5

    68c4e6f8b69818cde7e3b6b312eef597

  • SHA1

    d8ecbfaf7da5452ce2dbb0d0d247d6efd7a7f40c

  • SHA256

    ef09243baed67c2d1f62d8beff0fab077f0df0a4742df117028fe4f89cd0d5e6

  • SHA512

    3714ab2b6577acff7434fecfb4e3566a034e8e1db6a943d50e419955c303fd0c23e7758e93dade7d0ee7b47d83ef424d16cffe862e51a8ca6e70cba29f25df2d

  • SSDEEP

    24576:N2SE/ZNhnj7gv3qC/VMNtOk0eCw5mbMDSVXT5XiZBya3AWOE:N2Lvgv3qC9MWw5GXT5Xij1w4

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ef09243baed67c2d1f62d8beff0fab077f0df0a4742df117028fe4f89cd0d5e6
    .exe windows:6 windows x64

    eb47b1ae73ca60fba5f5b2cff9a47c8c


    Headers

    Imports

    Sections