General

  • Target

    5895036d3b948d08451572ea7605ccea736a068b56ea60360bd5a16fde5da747

  • Size

    205KB

  • MD5

    f444a401ffa983f013d9bb296e5c7618

  • SHA1

    9e84720bc7f4cc7f941e284fb8b0d475c84ccc8b

  • SHA256

    5895036d3b948d08451572ea7605ccea736a068b56ea60360bd5a16fde5da747

  • SHA512

    7f658a25bb52124711efb3edf2cc9db98dfab5411c4a25755959960ac48733c83f66c82ac57682f8ef3395f96702e7610a85c4057d3f77f259c31482464a1fd7

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5895036d3b948d08451572ea7605ccea736a068b56ea60360bd5a16fde5da747
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections