General

  • Target

    90b15f45b5e5b8edfe9bc287f324d336d82ff0504e93af055071376b1af4fc74

  • Size

    754KB

  • MD5

    fb4f85954ed41439eaa263a6d82cdb6b

  • SHA1

    d263cd48d7f17166228e047f1cd4be187a5877e0

  • SHA256

    90b15f45b5e5b8edfe9bc287f324d336d82ff0504e93af055071376b1af4fc74

  • SHA512

    a376f9a38b6dc43039c9ce6e1f211fa4d5dc9ebad57e5161b1f76a711e0254aa9028efbf45b63d698352630129b5a5e3208c225b9f361594852d5ed7966d6f4c

  • SSDEEP

    12288:pPMyQq8h0PGYcf1ntZf9DTCW6L2B96QTmodXdfdGoHRT3rX22PIoexqxIY4uUeLr:pPMyWh0PdcjDTCWVbTmodXdlGoxT3r/E

Score
10/10

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 90b15f45b5e5b8edfe9bc287f324d336d82ff0504e93af055071376b1af4fc74
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x64 arch:x64


    Headers

    Sections