General

  • Target

    edaa9ab678e685932003e0b41424af479bba3f55e80e027bb6222179b3b9350c

  • Size

    205KB

  • MD5

    8de6d37b3e2aad724d25dc9253293085

  • SHA1

    865bcf366c947b6ac7448e3afbd54d81cd336b64

  • SHA256

    edaa9ab678e685932003e0b41424af479bba3f55e80e027bb6222179b3b9350c

  • SHA512

    fccca812876115c950a563006785973e8f88ae4395664d11d3f514c405a463f1ea312378ff8dd05fc518b26ecb8c584c0b090cbf2e781462890b6bce626c94bc

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • edaa9ab678e685932003e0b41424af479bba3f55e80e027bb6222179b3b9350c
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections