General

  • Target

    00861d86dbe7b3a63e12fd5096341c3b221d3bfbc535a9b2f88d81a4ef9539ff

  • Size

    617KB

  • MD5

    64d45cbe65ea37bb1de2a71f36af151e

  • SHA1

    9d1e38e66821e7b12a1ff1730885f71373e373f9

  • SHA256

    00861d86dbe7b3a63e12fd5096341c3b221d3bfbc535a9b2f88d81a4ef9539ff

  • SHA512

    48857068e714f6f22d83b601a19219669aa58ecf691001a54f06a38074281053ea0780d05557cae22ea7112e71ceab832f8bffe991d1d198192ac11e6e46b8d3

  • SSDEEP

    6144:WtTB9eOWnaWYkq1VN7BxDrU9J+klKnevBHrhpTrkt52E1qXSBzkk4L3CmmoTyzW9:WtTGOoaW+nGlKevBU1qhk4z0ayzW4yz

Score
10/10

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Purplefox family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 00861d86dbe7b3a63e12fd5096341c3b221d3bfbc535a9b2f88d81a4ef9539ff
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections