General

  • Target

    06556165b19bfbe542e81296846c8d38ad3552b5252ada8a8a53fa73a8b26495

  • Size

    1.3MB

  • MD5

    8a0cdfa2bca429be49328d142df81c3d

  • SHA1

    559120996cb276d2b59a841c66a715f71b081a0c

  • SHA256

    06556165b19bfbe542e81296846c8d38ad3552b5252ada8a8a53fa73a8b26495

  • SHA512

    bc865ea0277dfcbe063287b1525f2348323900497be4e534e9f3cdc9c5974ef786a656b9c072da11e0a7484d61947c8e651bd640f9b8c7328466b1dfaf203e9e

  • SSDEEP

    24576:XunZiVhuYIHoXqcHctS7jMD/3T7yaKDSVXT5X:KZguYmoXd8QMv71fXT5X

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 06556165b19bfbe542e81296846c8d38ad3552b5252ada8a8a53fa73a8b26495
    .exe windows:6 windows x64 arch:x64

    afbeb38e7d892e8620cc4b29f7e57696


    Headers

    Imports

    Sections