General

  • Target

    3bd55d0879ca093d21aed6ac305bcff33ba6be17bf085c37c4bcde78be27bb5f

  • Size

    205KB

  • MD5

    b0f562bb976d47cf529a07e1b6c9a8f9

  • SHA1

    f40a771d273be5196bbe3f01efe64cebb0746f18

  • SHA256

    3bd55d0879ca093d21aed6ac305bcff33ba6be17bf085c37c4bcde78be27bb5f

  • SHA512

    721bab4bacf38baf0c7677acf17ea44e79f0f3f497d498d9776f6b4a96ad495e9efb8a442fdeedf08b7b1462bdc8865ba35b4d8d304b704a593252d0b815b1de

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3bd55d0879ca093d21aed6ac305bcff33ba6be17bf085c37c4bcde78be27bb5f
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections