General

  • Target

    bb15d0c336f73fc9c8fe1d675a218fb9.bin

  • Size

    1.3MB

  • MD5

    bb15d0c336f73fc9c8fe1d675a218fb9

  • SHA1

    63038db54838ec0eceb917e56d69c1a024096ca6

  • SHA256

    ba851696e371fb5168687c362a74bbca8f3a09fa5b7999f9c7b5294b39f2e92c

  • SHA512

    b12efc97b52eb0b7a21f85bde1c53ba0e239a870be4ed83a45c579bf67e2533d90db7f484704ac4f91730a752393fdf3fafb18a28eb75b10dfda29288672d3c2

  • SSDEEP

    24576:DbsT8+hPULj6gh0yXGlkDXbhAFGvy6PNDSVXT5Xdqt3ya:vGhPULjXhBXxfhAFGvAXT5XK1

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • bb15d0c336f73fc9c8fe1d675a218fb9.bin
    .exe windows:6 windows x64 arch:x64

    28871e7fd41b875456d7742efbec7703


    Headers

    Imports

    Sections