General

  • Target

    13319b2818fa5519f691d2ee9ae6e0a38984ed0fd1188e362ec30a92456c77d3

  • Size

    205KB

  • MD5

    2fe5bb7932f0f934dd175313a4d5b7c9

  • SHA1

    89550ffab86630e86154312e12c619b23ce37810

  • SHA256

    13319b2818fa5519f691d2ee9ae6e0a38984ed0fd1188e362ec30a92456c77d3

  • SHA512

    b46959497153095ccbaae439db344e1fab90b6c0173e8e6e0a6509e15b4f24a5fa940cfd89e727dfe080c35b5c41114635a99f43f3682f181275884335cfb6cc

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13319b2818fa5519f691d2ee9ae6e0a38984ed0fd1188e362ec30a92456c77d3
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections