General

  • Target

    a2c94ea8491c094510d92b8c7ad350f50e318beb562d9f3cbb05540438de7fa5

  • Size

    205KB

  • MD5

    5279ffaffd19fb838b7856ae31ebb8db

  • SHA1

    64580fe729ac05caa6d7906cfb6d1565e48c1f25

  • SHA256

    a2c94ea8491c094510d92b8c7ad350f50e318beb562d9f3cbb05540438de7fa5

  • SHA512

    4163496f7ed67aff3973d55c98d016455e1a462d7361ebd71d6b3b0793ebd3a6d1b717c07d672f118da383b92819650a538538c364e09e5724fbcfbb82aef15c

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a2c94ea8491c094510d92b8c7ad350f50e318beb562d9f3cbb05540438de7fa5
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections