General

  • Target

    ae5cf533821e58920b50db18dcc17824d53f508d43c4b00a9c25a474142fe6fb

  • Size

    205KB

  • MD5

    f8001d02106a59beb4611d6b04c48209

  • SHA1

    d9c8829f40da8517316d718b82a6dcd9722e023e

  • SHA256

    ae5cf533821e58920b50db18dcc17824d53f508d43c4b00a9c25a474142fe6fb

  • SHA512

    37164f67a3aa2ce0b98cc460f89aa4150751dfc189e2eb654aefc9ef374f3932e24fbf10734b273153e852da47741f8a104ef2c3481e59bd35d17f6fc5ff117f

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ae5cf533821e58920b50db18dcc17824d53f508d43c4b00a9c25a474142fe6fb
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections