General

  • Target

    54f05c97b3b37c3ae1740bea2c4cf00a.exe

  • Size

    205KB

  • MD5

    54f05c97b3b37c3ae1740bea2c4cf00a

  • SHA1

    707d19d238a5ead86c18a1d30fb6a10a6043ca5e

  • SHA256

    e51cb12829e155b7a5cc9686d474cc958d955614ee778d211986d7599f958190

  • SHA512

    99a9a224efd6e9a10ebce4e96c42f978558a172b64d3b951db9127f0afb093a1bd241e91fd2159d2ee574ae9288f11036ef6dc55959a00e228ff19e0bfd43acc

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 54f05c97b3b37c3ae1740bea2c4cf00a.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections