General

  • Target

    539c4b14690b92ded3ac90b67e4fa05619a0dd1e190260d393b9850b107a0a6f

  • Size

    205KB

  • MD5

    fcbbc32f7f9446dc48385bacaa50904c

  • SHA1

    a7172ff8cd00465217400c849dd131a3c07d748b

  • SHA256

    539c4b14690b92ded3ac90b67e4fa05619a0dd1e190260d393b9850b107a0a6f

  • SHA512

    0e1b194cb8f0f63ce1fa93716a9109e93658dbbd6fcde00e3fd93b4facdc53d2a93ef57a99e5c55f96159ace606527433f3a2f58a8030ccb2421bdbf427bfc2e

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 539c4b14690b92ded3ac90b67e4fa05619a0dd1e190260d393b9850b107a0a6f
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections