Overview

overview

10

Static

static

10

baf40aa69c...fb.exe

windows7-x64

1

baf40aa69c...fb.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    baf40aa69c338fdb9ced06019b21dac2f36e65cac016092962cbd2d1095fccfb

  • Size

    1.2MB

  • MD5

    d5fb18bdc77cd7ca4ce99d290d1834e2

  • SHA1

    0ad19c11edebf57b023018660fc7d2c1e8770d08

  • SHA256

    baf40aa69c338fdb9ced06019b21dac2f36e65cac016092962cbd2d1095fccfb

  • SHA512

    a18126b3672a8fe80e3e00c4359db833df9dda52cbd71f3ee4aca9ce20f0b89f7948e580eb099641f73f9e13927088bb00f1d232376bd2e212d79fd5285fd2e8

  • SSDEEP

    24576:wYUrQABbyYRTRyJYzOuA47p03qgGKpigjU8K5KVIDSSPcm4bJ7x:KMABbRtyUlpF8KVKV7x

Score
10/10
r77

Malware Config

Signatures

  • R77 family
    r77
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • baf40aa69c338fdb9ced06019b21dac2f36e65cac016092962cbd2d1095fccfb
    .exe windows:6 windows x64 arch:x64

    99dde9683e2c2f1aa87a0ae0b5b0d41c


    Headers

    Imports

    Sections