General

  • Target

    0b6f65cba69ca908cc80c20a92e6c47385e4845e75db213c83e77a04a6b718ac

  • Size

    305KB

  • MD5

    f60a0d8a53e09e26b366f89f1aa6b9f4

  • SHA1

    2b0fd5a428c46f8a9856f58b9b1552a3ac661376

  • SHA256

    0b6f65cba69ca908cc80c20a92e6c47385e4845e75db213c83e77a04a6b718ac

  • SHA512

    1008ed423bbd35d2a38fe6816b974c80af0e913f0bb380ef50cdb4665ef22948c7b28bb6c9090198e9f0e8af6f788b0f0a77b8659330fa9395c3028c74a5b0c2

  • SSDEEP

    6144:3wvogtFbxCp/4Y4Kndkz/McIkKQ85GHHWNKB:3w9inRczX

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0b6f65cba69ca908cc80c20a92e6c47385e4845e75db213c83e77a04a6b718ac
    .dll windows:6 windows x64 arch:x64

    cb913eca49306aa856b4da889700badf


    Headers

    Imports

    Sections