General

  • Target

    03667499.dat

  • Size

    205KB

  • MD5

    a0ef2a7e280a95c27daf48306979da60

  • SHA1

    870a3e2690edc660d730978e7be0e57605b63d47

  • SHA256

    0033b7b8c34d3ef7464793e871bb4312b440a5766fc3083f6db6bc1c99ee2046

  • SHA512

    c3577de31e3fe7067789fc1228839a607e21535ee48bf0cf1383a9f92c2b128cfc7fde79c696a7f8e51e9e27bcbc28bfe50644acf5c0c0a58380b7918b5f4138

  • SSDEEP

    3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.83

C2

77.91.68.30/music/rock/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 03667499.dat
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections