General

  • Target

    ab5c8b3d257184a3b4a2d77f913cab524f67027ea37b8d2aa10bcc64c929d469

  • Size

    205KB

  • MD5

    934e9e703b04094753632932a0c62654

  • SHA1

    133bd86347b18953a4a6a84ab2755576c15ff8f9

  • SHA256

    ab5c8b3d257184a3b4a2d77f913cab524f67027ea37b8d2aa10bcc64c929d469

  • SHA512

    7babb7090f33889ad1b87133f71cb66da5b495dc3cb74c18a7f158fa71dd4f86c75eae4fdb324470ac8a0708cc072ba8989f0db16f558374f7387bf5131140e2

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • ab5c8b3d257184a3b4a2d77f913cab524f67027ea37b8d2aa10bcc64c929d469
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections