General

  • Target

    b0d1b792a2691d7ec72d382eb51b9b59587dde4d75ead7300382d42a388d0f6c

  • Size

    1.1MB

  • MD5

    11286fa196255ae944d66c1568a9d816

  • SHA1

    53000ff0c905a72caa05102dc5700e9d275f6e76

  • SHA256

    b0d1b792a2691d7ec72d382eb51b9b59587dde4d75ead7300382d42a388d0f6c

  • SHA512

    f5e328fc25de2b67eea2eabe8c2e1300589b74fb3bee476b7ae54651bed80021731c633bd3b6eeacf053c338c0430e07f605c3a9af98cf57bdca1084298863df

  • SSDEEP

    24576:w2UlQci3khFwLhaOUYo8N3ZbXBFO5ZDSiTbJ7E:WGfaw1aOU/orFO5tV7E

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b0d1b792a2691d7ec72d382eb51b9b59587dde4d75ead7300382d42a388d0f6c
    .exe windows:6 windows x64 arch:x64

    053a2861638be468247659cfe8e7cd16


    Headers

    Imports

    Sections