General

  • Target

    08097299.dat

  • Size

    205KB

  • MD5

    e26de9abc706cb8fb9e0d0adc345349d

  • SHA1

    a03861fe4e814de56d30e04d2290f0e5cf529296

  • SHA256

    bf6bf65a490bc43af6a5482dd7463cfca39c095d465f6a78696893235181e18d

  • SHA512

    58dde0481adc164733b14b7506cd1e1f11862aebca471e754ed950ff2ebcd42d2fea91c567edcd905f4d339865e281c20593e47b93e3477f06082129ef56ea87

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 08097299.dat
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections