General

  • Target

    14a30e6bfaf7c6470591c8ddea7480b14e2551e53cbd0e3711c2c5557c700bcc

  • Size

    205KB

  • MD5

    641167f0bfc83ecc495a9e52aa72c5af

  • SHA1

    1d121c738f94c1278e2bd3ebce3b46f0d8a9abb2

  • SHA256

    14a30e6bfaf7c6470591c8ddea7480b14e2551e53cbd0e3711c2c5557c700bcc

  • SHA512

    0468da2b816aebf4bddc76cc14f5483f65aad169e6e09a903a10dc3d89afcf74af5f9b872df2a7b7cc783769cfb5df521d8d11e770b0e95878d61a8515f27c3d

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 14a30e6bfaf7c6470591c8ddea7480b14e2551e53cbd0e3711c2c5557c700bcc
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections