General

  • Target

    05603299.dat

  • Size

    205KB

  • MD5

    82d08ab172901fd6a72ba3b87d51e473

  • SHA1

    721c862c55cb64cebaf033951026a70fe647e1b7

  • SHA256

    fa3c5bff1add0838833d89f8f4c5cdbee8156b4a89b59868d69056c5545e412b

  • SHA512

    7f02867d4e2f95d121cb8c793f726dc3a5113f256ceb978f013d0de3cb61e5fdb8bdead874eb1cc046fa86015452309d0f68150c328f07eca4b786def8903f44

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 05603299.dat
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections