General

  • Target

    dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9

  • Size

    1.1MB

  • MD5

    96607a076c9a521d69791151572eb499

  • SHA1

    c13fee4b3508c547652eb6a654650968fdc353ff

  • SHA256

    dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9

  • SHA512

    7acd7f3f6313fbd4bc068e4e1da08747a9ccba5dd2e2fe05295d7a086a324ebb9b4cfc4fb88c299e51555ab503266cfc360032c50735453b6b918ae618914f30

  • SSDEEP

    24576:w2UlQci3khFwLhaOUYo8N3ZbXBFO5ZDSiTbJ7h:WGfaw1aOU/orFO5tV7h

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dd3b76fb3a56a8e012688369f15a91748ff2b841b823834c6db13aaad14b1ce9
    .exe windows:6 windows x64 arch:x64

    053a2861638be468247659cfe8e7cd16


    Headers

    Imports

    Sections