General

  • Target

    8fe8de4b1ffe1aab3103aefc0c694c5fb7b786c963a011ce66f9b5062dc5b2a9

  • Size

    539KB

  • MD5

    b22d6f76e83e31ed9b3a3726186b7465

  • SHA1

    c442cbb0f0d65ac4998c92753755070b0bbf7cb3

  • SHA256

    8fe8de4b1ffe1aab3103aefc0c694c5fb7b786c963a011ce66f9b5062dc5b2a9

  • SHA512

    9d38e3a476a53fc948da3cd417791c7221705ba96e1c22121594a3c98ae32e7467f4f974e3e51afe4ba2f5a48f0c32b0db6bbc1b08b908f9cc04fcd50ac1b0e9

  • SSDEEP

    6144:8tTB9eOWnaWYkq1VN7BxDrU9J+klKnevBHrhpTrkt52E1qXSBzkk4L3pWmKa:8tTGOoaW+nGlKevBU1qhk4z3K

Score
10/10

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Purplefox family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8fe8de4b1ffe1aab3103aefc0c694c5fb7b786c963a011ce66f9b5062dc5b2a9
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections