General

  • Target

    0d7d0586e21299240cc9b83981373c42.exe

  • Size

    206KB

  • MD5

    0d7d0586e21299240cc9b83981373c42

  • SHA1

    deba05fafe27ac5544ad3413b01ad100bb31b380

  • SHA256

    48faec63e8bc8c8771f713876064bf5cae053c7e7a77cb74bb850efe507f0057

  • SHA512

    7d9d0b25f371bc9e4da2f90c2ba64648354075c5239364688bb099d1ce4213eacd0c813df5fd371708242ecba2debba0afe6785bf394777f3e36f33ed0399ea2

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0d7d0586e21299240cc9b83981373c42.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections