General

  • Target

    4b48f86d0192164a9c7bf2fe2482ce979851844f5e7cd6d896edb76817bde09a

  • Size

    205KB

  • MD5

    47f36c058a3fe0900f3de29b957c3160

  • SHA1

    753d04679448cbcb5ff0bd7cbc651690b222de98

  • SHA256

    4b48f86d0192164a9c7bf2fe2482ce979851844f5e7cd6d896edb76817bde09a

  • SHA512

    818bdf12571a7530f1e03fc4149d2c137b3f2e55d1f7b165dded36967577339645a2d0af17ab7a91ae60dcce7b961f9c86dff29857a72488d03c97d4f967954e

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4b48f86d0192164a9c7bf2fe2482ce979851844f5e7cd6d896edb76817bde09a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections