General

  • Target

    b2ef7072ac28d9e3af8f9252d35982b3f4beb5fa84065f47d7d9172854635519

  • Size

    1.9MB

  • MD5

    472cdf7d81088bf92229c8ab040bc0ec

  • SHA1

    3753e31119574253d715c75a3dded7fae53b5436

  • SHA256

    b2ef7072ac28d9e3af8f9252d35982b3f4beb5fa84065f47d7d9172854635519

  • SHA512

    1b04e2be121dfa9306cfdf7da490a65431ed2a9e61216169cb1191f51958edcf3e19b5fcf69abb94c4530f33eac4ac2ed986961f732413741f274243c226a867

  • SSDEEP

    49152:gak8nd9WyKBidpaiExeHJaYNxlAaXT5XRC1w4:HCMdpxlHcYNAaD5BC17

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b2ef7072ac28d9e3af8f9252d35982b3f4beb5fa84065f47d7d9172854635519
    .exe windows:6 windows x64 arch:x64

    badbf21673bc4eecf30293ad0b69f725


    Headers

    Imports

    Sections