General

  • Target

    rocl.exe

  • Size

    29.6MB

  • MD5

    e91eff26e60b2ab5fa30410956999a6e

  • SHA1

    49158b70a3c790cec83bf4a99392c24636caacc1

  • SHA256

    6a3e261d1bd64683d2d1fa566409f26355c69163a47d584619ca5a1b052fa3c6

  • SHA512

    bc32b42362d811fe52322439c12d266b4bfbe2273d14d633a2465c7680ceafd67816273715f0d08fbc47a8eceea50c06cea7928d0d8c962e55da7ddcba447e83

  • SSDEEP

    786432:cPJU/pO1QtIbSN2j6+s7LWB75zu1PJyE6a8DZcIliKqTA:cPOpaiI2N2qHWB75i1Prb677

Score
3/10

Malware Config

Signatures

  • Detects Pyinstaller 1 IoCs
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • rocl.exe
    .exe windows:5 windows x64 arch:x64

    f4f2e2b03fe5666a721620fcea3aea9b


    Headers

    Imports

    Sections

  • WindKittyRat.pyc
    .ps1