General

  • Target

    2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675

  • Size

    776KB

  • MD5

    1b28e9a5333b090279dfd0c36f78cd76

  • SHA1

    55133014f4f83b769b5d2e9b8f44fafcde893830

  • SHA256

    2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675

  • SHA512

    ac558d09a8207b9141308aa8532e90611c3cfa99e68a7028d3d9e8159b45825ed8e8b53c0dbf677c39c5e1369b05fe2d57d45cdfbf6113058ca3e916f38a76a0

  • SSDEEP

    24576:6mjl2AcvvGFCAYMFwRy64FVwUR/1qHDS:6o2bGEAYkwo6gVZR/

Score
10/10

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 2fdadd44fa8ca62bd04728e2efa12aa1c97def0a4a3f1f414944d259c73c6675
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections