General

  • Target

    659e42fbd3798cc50d600463d1e7c63af8f642eec538cdc68f04158c6de53221

  • Size

    205KB

  • MD5

    1d458936dae44f771e4010d2cf2fb7ab

  • SHA1

    5a2744ba91aaea3babf654c712042c2538a1c262

  • SHA256

    659e42fbd3798cc50d600463d1e7c63af8f642eec538cdc68f04158c6de53221

  • SHA512

    bafd7ec95ec08cae01c18db013f54668bafe6cb4497e70caad0c0518c8b24d3e74061fff3e361b3ccae001b253daf6ef80a7f3a41d4f5774efc4341dbdef323c

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 659e42fbd3798cc50d600463d1e7c63af8f642eec538cdc68f04158c6de53221
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections