General

  • Target

    1cfb359a42adf0ca5954fbf60719b3ce099ca18dcb689f9aaa009435a4eef6d1

  • Size

    205KB

  • MD5

    c394b095869f0e9c71cf3c9d88694ecd

  • SHA1

    9aec9fe90990ec1b0ee4ef2f157e90d66cef47d9

  • SHA256

    1cfb359a42adf0ca5954fbf60719b3ce099ca18dcb689f9aaa009435a4eef6d1

  • SHA512

    e6b5fd976ede1a5204673993408ca9e84eacc5319e057045d3ca3841be43ccf11e72f6faa9c1e2b64d3ee787fbeac939a8b8a3affcf86c496b05382bac6e4dc1

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1cfb359a42adf0ca5954fbf60719b3ce099ca18dcb689f9aaa009435a4eef6d1
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections