General

  • Target

    2b413b5e89dfbd0a97d4a91c438d040ae7d5244b4e337ad17f54ae83ca354b36

  • Size

    205KB

  • MD5

    6dadf5291ad8a4ebda19065b3cdcac73

  • SHA1

    89f33adea48c62d93cbfea7101657192117f1d6a

  • SHA256

    2b413b5e89dfbd0a97d4a91c438d040ae7d5244b4e337ad17f54ae83ca354b36

  • SHA512

    38787118a0cfde2cec25b098862dfa2aec9481e3ee0b1bf9a62f25a7a9222eb6e99f8e68a56cb196fb4b69265684a76e7288826d0675c47da142b7415f8ef23f

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b413b5e89dfbd0a97d4a91c438d040ae7d5244b4e337ad17f54ae83ca354b36
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections