General

  • Target

    c2613ca9d8b355d0516dd37794a1cf4cfe0b410b19d73cebeafc571e9391a57e

  • Size

    205KB

  • MD5

    dded49ac9cac9ce50e247fdb40791f71

  • SHA1

    7a3bca08275c576839bf84f9de35a87aa86f5df2

  • SHA256

    c2613ca9d8b355d0516dd37794a1cf4cfe0b410b19d73cebeafc571e9391a57e

  • SHA512

    eb8b9c5e8149b455b7f7eab626f89fa14d7122821dce74ed0b46e319f2bb77d12c1b7ff21f2d2d3d70f37216d9baff0e730a0b60a47fbd2169e216b740e83082

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c2613ca9d8b355d0516dd37794a1cf4cfe0b410b19d73cebeafc571e9391a57e
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections