General

  • Target

    44ad9e5b7f8e75118db1cf6c12a5d9533dc73147097735dcd7d9e3bf18eb5e5a

  • Size

    205KB

  • MD5

    2655d0729679cd4209708f5f962dabf2

  • SHA1

    4bdf179cc1da5dc6fe5ea196426ec5ac63d47cae

  • SHA256

    44ad9e5b7f8e75118db1cf6c12a5d9533dc73147097735dcd7d9e3bf18eb5e5a

  • SHA512

    deea6e268083f7757130611ccdceb39f39a057452b3b3db7ea7fe50aa118f475774b5183e710f435c67a7ef65dd5e97409b75e3ef0383b3ee7cb25ad3ea27abf

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 44ad9e5b7f8e75118db1cf6c12a5d9533dc73147097735dcd7d9e3bf18eb5e5a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections