General

  • Target

    Hades.v1.0-v1.38.Plus.15.Trainer.x64-FLiNG.zip

  • Size

    842KB

  • MD5

    401f19d88a93ce11d2b669dbc0290faf

  • SHA1

    ae1bef5c0e74072b5b709c004e501f3599579591

  • SHA256

    c3c090b5f4897bc7cb19e493b0bc528ce4ecbac8a6223c46aa3dc28a15f7f8ea

  • SHA512

    c2662710693e2873e89987a4f5849c9c6802c7206b42fc1a0f479ea8d8abf1462752fbdb94301e313ebaa06dea1aec330b398270068a2de8f40187a6c2ad43b5

  • SSDEEP

    24576:O8AqfHnN1K/3XXsbhA7ApDAjRfW63AMIcNZ00:OFqfHLcsba70DAjRx3TIB0

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Hades.v1.0-v1.38.Plus.15.Trainer.x64-FLiNG.zip
    .zip
  • Hades v1.0-v1.38 Plus 15 Trainer x64.exe
    .exe windows:6 windows x64

    6e9ae241968c8e690666492540d61ca7


    Headers

    Imports

    Sections