General

  • Target

    y49Xs12.exe

  • Size

    229KB

  • MD5

    3308051ded87b1863a8d92925202c4b3

  • SHA1

    7834ddc23e7976b07118fb580ae38234466dbdfb

  • SHA256

    13b4b17671c12fd3f9db5491efb7fb389601b57ac7f89fd78638625c1ef201e4

  • SHA512

    f8e016a2f9cd7851048811fa2846b1853f175916c32dc593e0c469614e87e4f6b07e3dee1f13c662fe9bb6865dc67837a1ab8036e238202e9353e3120f633ddc

  • SSDEEP

    6144:mKVNIG75NpcElElt/DgK1yuFShFBr2D+:/5KE6LguFS7BB

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.70

C2

212.113.119.255/joomla/index.php

Signatures

Files

  • y49Xs12.exe
    .exe windows x86

    88e77976ee88242bd495e2b66bf3b0c1


    Headers

    Imports

    Sections