General

  • Target

    ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458

  • Size

    1.1MB

  • MD5

    efafd0d1dafebe56ec8801983315f442

  • SHA1

    f08f11509ae673950dceacfdc27a6c2c6ff7c90c

  • SHA256

    ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458

  • SHA512

    e1f03ed1be3be0992d59be26f45b3d242738215bbb9a615e1e33ab90e29d65140a4ae48965adb1bfdf0c377f32b4f005b283449d45b6f977c36273462f952265

  • SSDEEP

    24576:TmvWX5h0avIQfTn71Mm9H68i8qsTcIzGo4jAfz1f8:TmvgQQfT7K+68RqsYIKBMfzu

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ff71371de6f84438d30f0938494562c034945611509c952d6fec63ab4aa39458
    .zip
  • 修改器/Dave the Diver v1.0 Plus 18 Trainer.exe
    .exe windows:6 windows x64 arch:x64

    2a5e68b1ba8b97035d1d1c80bab665d0


    Headers

    Imports

    Sections