General

  • Target

    d0c1db82e84faebc91232ef8e05aaefaf192e5f92fdb902e36b32b6f9b586ca9

  • Size

    205KB

  • MD5

    4744d5bbf22fbda9dedfdf490bb141fd

  • SHA1

    3fde19d07123296ed5d1c745ba9e98cd30395242

  • SHA256

    d0c1db82e84faebc91232ef8e05aaefaf192e5f92fdb902e36b32b6f9b586ca9

  • SHA512

    01fd1eeb0bbfa9622c74ef6cfc6d81b8a0bf80759ea20a3937ad2dadb204a28777fecd4da29d4d85e3e4be3e68fad982df919acbd5c64a321d91b0c5a209029b

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • d0c1db82e84faebc91232ef8e05aaefaf192e5f92fdb902e36b32b6f9b586ca9
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections