General

  • Target

    aa59a1c3069db8707ce8bdca71a13e2c537c6da8a5482dcf2dc9c3ce70afa15d

  • Size

    205KB

  • MD5

    be8b78710ee79860818fa7f536ed074a

  • SHA1

    86a345394ffd13bac2d7d88e0020283741e5108d

  • SHA256

    aa59a1c3069db8707ce8bdca71a13e2c537c6da8a5482dcf2dc9c3ce70afa15d

  • SHA512

    5d9feddfaf5d7d0591d14c265541501d147bb5820806c5912b2013bc25ec3ddd71252e01702a754a77410124583229d1b8f609ea830b638796973e1f78c15ea1

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • aa59a1c3069db8707ce8bdca71a13e2c537c6da8a5482dcf2dc9c3ce70afa15d
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections