General

  • Target

    037edd72b22328632fd37deb587b9cb447b8bd7fb8fe6d8854e1472ff8826a78

  • Size

    205KB

  • MD5

    b0f9f3eb4f41ce5d33c77039d9767f86

  • SHA1

    88d908fced2da42e4f9b352ef82fd70de62a0ce3

  • SHA256

    037edd72b22328632fd37deb587b9cb447b8bd7fb8fe6d8854e1472ff8826a78

  • SHA512

    f1a6381a51a149fe6b30e1e68dd0495bbd7ae850e15322b6fc32e1b7814b7083d6afd6597918d26559aed4441cb4299fda391927cbae6c8a6eac391efa5f8b66

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 037edd72b22328632fd37deb587b9cb447b8bd7fb8fe6d8854e1472ff8826a78
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections