General

  • Target

    b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c

  • Size

    1.7MB

  • MD5

    b78c2aa166f23682efc3ae0808f28d9b

  • SHA1

    00eee137ea2c204016b65834e26ec37bba2b6c91

  • SHA256

    b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c

  • SHA512

    ef32f6bed47ef1e66ec9c08a7affa0c1a5d85bb7ea54d0f4310a898ea5d50588363110ef7962ff8b1a26f1de21a2d59a08de809b8a81c93fa2beedc90d498333

  • SSDEEP

    49152:4b9+71zmzLrEmzLNtNnE6IXT5Xg/WIB1:jO7zLJnEvD5Q+o1

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2dc58b8dff3e94bbbd374b6e54e9a16b95cd0184dbf9fd27ad64fd11b5f8b5c
    .exe windows:6 windows x64

    60ee2283264781cb85bbeca69257273a


    Headers

    Imports

    Sections