General

  • Target

    4948e5469fc09f2280bb2a6f8bf34c837f11e121ef87387194426dc2bffee166

  • Size

    1.6MB

  • MD5

    3d56cd9777c924559cfd5ac986339f19

  • SHA1

    9c0e5fe93463011029d8149cffdfa50e38ee161e

  • SHA256

    4948e5469fc09f2280bb2a6f8bf34c837f11e121ef87387194426dc2bffee166

  • SHA512

    6d011cc2d271cac71cf5e7d67463472a82e55ad3b86d4d8dc4f41f603a667fcdb00bacf5245f3dff66a927a55f1ac180efe5e7644158a3b0f28f4457cc61a21c

  • SSDEEP

    24576:VeOCnoITBKtKUFIb99eESRh0ME23JMKOuTlqLoA6D6IVPx7JDSVXT5XOt4eSyaI:Vmy0V2ZMKOY31PxKXT5Xug1I

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4948e5469fc09f2280bb2a6f8bf34c837f11e121ef87387194426dc2bffee166
    .exe windows:6 windows x64 arch:x64

    d99ef2cfe5594f55c6ba0cbef331dee2


    Headers

    Imports

    Sections