Overview

overview

10

Static

static

10

260d848cbc...fb.exe

windows7-x64

10

260d848cbc...fb.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    260d848cbce0f975f2842e5ac2a678b087e1f8418feca73b1e1f603765a1a3fb

  • Size

    2.9MB

  • MD5

    2defbea0aa2bf978d7e9cc6738dc3bf4

  • SHA1

    a3efd8a8c544e7dc79c01fd837469470b054bd42

  • SHA256

    260d848cbce0f975f2842e5ac2a678b087e1f8418feca73b1e1f603765a1a3fb

  • SHA512

    0ba23b2a637738a3dc25ce2695245d347ea1edc93f455cef6edd7406717433c424c9e6976289ad7f620c1a347fbc24839509bc03890530cf19330800df682dd4

  • SSDEEP

    49152:UWSu7wVMlj1Qbfa0sS2NFPnkrg6rvcR7cOevwgeW2ZU6RnvE3+AKlkx:UaQM3Qb16krBrvcRoOqHS5vcpDx

Score
10/10
upxrootkitpurplefox

Malware Config

Signatures

  • Detect PurpleFox Rootkit 1 IoCs

    Detect PurpleFox Rootkit.

    rootkit
  • Purplefox family
    purplefox
  • UPX packed file 1 IoCs

    Detects executables packed with UPX/modified UPX open source packer.

    upx
  • Unsigned PE 2 IoCs

    Checks for missing Authenticode signature.

Files

  • 260d848cbce0f975f2842e5ac2a678b087e1f8418feca73b1e1f603765a1a3fb
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

  • out.upx
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections