General

  • Target

    56fba3669a11a967a721b34ee114169e1d640dbdfedbf861324950052141c084

  • Size

    205KB

  • MD5

    9cf322a8cbc5d881ab6a4ed18ec19e6c

  • SHA1

    9a247ba8bf773e9196ae08308115d383c1e3770e

  • SHA256

    56fba3669a11a967a721b34ee114169e1d640dbdfedbf861324950052141c084

  • SHA512

    0d44ed60c52ed03e0477761b540d2e7bcfc4f878f4899168eac85b9461191a02b743acc5d17997f67fedbee0803e25348161519979c1913b40a9814390e2b7e8

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 56fba3669a11a967a721b34ee114169e1d640dbdfedbf861324950052141c084
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections