General

  • Target

    0229d05ebaaa2c41f2b8ff42babdc95bbe9bd0372fec5146c3c1dcd0ee4d39f3

  • Size

    205KB

  • MD5

    ff34da6ca8704715e207d34900d8b8ae

  • SHA1

    6b6e4b240c7544d8a87b715c0d2b4f30d65bf03d

  • SHA256

    0229d05ebaaa2c41f2b8ff42babdc95bbe9bd0372fec5146c3c1dcd0ee4d39f3

  • SHA512

    ebcb35a9828f8ad402f396206226e8a00171f0b594913b12175bbd067da0883bfa7db3b617f9d5cc95856a410ce76d44b6226ae5b81db76148eff9e26b191091

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0229d05ebaaa2c41f2b8ff42babdc95bbe9bd0372fec5146c3c1dcd0ee4d39f3
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections