General

  • Target

    f079f3fbdc322ac5046d5f0caf2d2ee9302be6d1e20ca3bf3efd9b0bb450e842

  • Size

    568KB

  • MD5

    f16baed25f918dc3604058d580ff7c28

  • SHA1

    81c8caf72bdb8cb13cfb8f440631507d00413da0

  • SHA256

    f079f3fbdc322ac5046d5f0caf2d2ee9302be6d1e20ca3bf3efd9b0bb450e842

  • SHA512

    484f361940ba950e48dde71eaa91313d38f8789bc18c8d8207f74b5e75d6424630b8b97f1beeb4128b63379e6a4f9345238feb96184d5bfb37bc8973a250754a

  • SSDEEP

    6144:/zeW0aWYkq1VN7BxDrU9J+klKnevBHrhpTrkt52E1qXuBz2QvkpBlWt:7ebaW+nGlKevBU1qFQv

Score
10/10

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

  • Purplefox family
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f079f3fbdc322ac5046d5f0caf2d2ee9302be6d1e20ca3bf3efd9b0bb450e842
    .exe windows:4 windows x86 arch:x86


    Headers

    Sections