General

  • Target

    e220a10916813ac668e34e02352b6e49bc9234eeb89211418928a1639c3067b6

  • Size

    1.9MB

  • MD5

    b2d81ab6b6061b6ac01de53f20f8d9ff

  • SHA1

    a5d3a362b79f0c2d362b96348ae1878858e0c348

  • SHA256

    e220a10916813ac668e34e02352b6e49bc9234eeb89211418928a1639c3067b6

  • SHA512

    df504228dba03140d04d82957d50a9a21dbf17e4bafdb013565b29f5714bccf2e12c4d9e4e38b56f279afeeb0a6c2d91a1bc44025249e2f187c80a746ba18936

  • SSDEEP

    49152:Wgil3OghBQ0xbWXqjvd/+wNg9cMpbigrXT5Xeza1w4E:lQ2qjDg9cMNigrD5/17E

Score
10/10
r77

Malware Config

Signatures

  • R77 family
  • r77 rootkit payload 1 IoCs

    Detects the payload of the r77 rootkit.

  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • e220a10916813ac668e34e02352b6e49bc9234eeb89211418928a1639c3067b6
    .exe windows:6 windows x64 arch:x64

    badbf21673bc4eecf30293ad0b69f725


    Headers

    Imports

    Sections