General

  • Target

    c0326b5a322991d153f50c0eb7dcd15c84103575c3ad5ee56d4551a39a85eec7

  • Size

    2.0MB

  • MD5

    520f4f4c813874e7ccced7390cf7ae3d

  • SHA1

    1242aab887432fcc0a1d35eade28d1ec0f965164

  • SHA256

    c0326b5a322991d153f50c0eb7dcd15c84103575c3ad5ee56d4551a39a85eec7

  • SHA512

    fca70cfcd709ef4618a245fb42fb5b6bc2b48b495c9766a344201e7bd3cc60ee7a1e40c71cb4a014bc1f7e50a2009309777ecbb705c5bcb792f6d75311475400

  • SSDEEP

    49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM1d:A8OOaS36D5r1d

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c0326b5a322991d153f50c0eb7dcd15c84103575c3ad5ee56d4551a39a85eec7
    .exe windows:6 windows x64 arch:x64

    ffab9e0538c0337bf92a491dd4d51685


    Headers

    Imports

    Sections