General

  • Target

    414e1a6d24b7b208a9f8379f2988feb64cdf54ba7c345bec344f876e92dffaa6

  • Size

    205KB

  • MD5

    58d7146354d6bcf0db04b78ec4c89648

  • SHA1

    8c36a24a653977e0abb7e8fdac9b85c96842880a

  • SHA256

    414e1a6d24b7b208a9f8379f2988feb64cdf54ba7c345bec344f876e92dffaa6

  • SHA512

    4654db08a6c0f785ac71295523483508afeaf5e19bf0236453658e94e91082f4b29fca8d6634f3a654a72e2d2625e21c743fcb8d64a2bad4184a76ec7b25a2a1

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 414e1a6d24b7b208a9f8379f2988feb64cdf54ba7c345bec344f876e92dffaa6
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections