General

  • Target

    705df4a3b03be338aae4a3018a034a491c05bc29c35cf2a1eb07028a84194e4a

  • Size

    205KB

  • MD5

    efb761413b4abc4c6ab869d379380c5f

  • SHA1

    dede000018e9c47bfeaf26e76bbbbfa16aa21d91

  • SHA256

    705df4a3b03be338aae4a3018a034a491c05bc29c35cf2a1eb07028a84194e4a

  • SHA512

    c6586fdee616172840ba0b6b2b2082a3929dbfc7631a52bc526d7217155310622c8c305fe2fc067b23a22242759738d083a250b87ff4cf0be933e3a94e49c286

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 705df4a3b03be338aae4a3018a034a491c05bc29c35cf2a1eb07028a84194e4a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections