General

  • Target

    h9746035.exe

  • Size

    205KB

  • MD5

    20f9da221c0b9a2b5f87763ab7377258

  • SHA1

    bfd05124777d125c98cf9e148d61d93bb4e506c3

  • SHA256

    369993ff4d2427179ad4cf7f25234eb7cc4d7d1eea2d69d01662e4c9148f5987

  • SHA512

    e01b62615d7b1ab5d866e0d1529634eb7a8242870eb968e4158cdca239b7808f980943f4c16ff34e68663eb36e4aa1206d2a0f5a4f81ca4b84f0132750341b85

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h9746035.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections