General

  • Target

    0662be21201c902a03dc7bffd572d0678e15fa36a4ae8300ef206290ff0367d0

  • Size

    205KB

  • MD5

    bc818cf4e47cbf81ebca056ae22bfbbf

  • SHA1

    f48e49a79d712a57520b63978d026ffb10b61e3e

  • SHA256

    0662be21201c902a03dc7bffd572d0678e15fa36a4ae8300ef206290ff0367d0

  • SHA512

    de13f3d94b75104d2f05f806d4fa68caec2a65c32e27394edcf2a9e7bb8bfc97a99953eb71f78e61631459e574d47989f3b45186fea15e2916afc67c4a0e89ef

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0662be21201c902a03dc7bffd572d0678e15fa36a4ae8300ef206290ff0367d0
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections