General

  • Target

    a5388d8f936e53a61b67d744f17161e404cff669d14e37635419c5bbd71e57cb

  • Size

    2.0MB

  • MD5

    8e51ca185158a1d30e81f067209e965e

  • SHA1

    b12e50f7cfb0a83330d78e5777736f1748cf9518

  • SHA256

    a5388d8f936e53a61b67d744f17161e404cff669d14e37635419c5bbd71e57cb

  • SHA512

    a86908d23e6226ebdc028c1128b4da54dcf0d0c734d9ce6bda9cbc14d13bad535b52aa0bef7a82339abd80766ceb4e659362eb9aea3b25de3602c45d68035dad

  • SSDEEP

    49152:AVImnP3ObryxvZcaS39o1LsWO4iaXT5XeM1u:A8OOaS36D5r1u

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a5388d8f936e53a61b67d744f17161e404cff669d14e37635419c5bbd71e57cb
    .exe windows:6 windows x64 arch:x64

    ffab9e0538c0337bf92a491dd4d51685


    Headers

    Imports

    Sections