General

  • Target

    5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

  • Size

    205KB

  • MD5

    246e24f071c41d09a98f3e5e5cede0b4

  • SHA1

    08e4716a6f246147ceb57008c130dca70c29edb3

  • SHA256

    5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

  • SHA512

    1359202c68e1e4b80528d9102f32ae4c8766bdd2f9b0b5cf814d1d76c485b1facb51542ebdfb48c0fdaab3003affb0427d67249a3492426d68f76433da546162

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections