General

  • Target

    A615CBC5DD94FCEA348533F243BDDC34F9802EBBE3851.exe

  • Size

    211KB

  • MD5

    872192011fce20a44869b81d95043bbd

  • SHA1

    d884367548c1f60263007a48cdcef84e7cb67a68

  • SHA256

    a615cbc5dd94fcea348533f243bddc34f9802ebbe38516f14f08e9bd3a3186c7

  • SHA512

    b52fe5749f3efb093f37bce6e454ed00ab813b551c07a6d1cbee636959ac2d0b42f9721e7fe4277c9413295e06beab6e53fe9124614d979b27865df3515392fc

  • SSDEEP

    3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.83

C2

77.91.68.62/wings/game/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • A615CBC5DD94FCEA348533F243BDDC34F9802EBBE3851.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections