General

  • Target

    5ccf06c1931134324b671f08db75d0e33ca4a3c6d896f5c3581ce9ed2547bc5a

  • Size

    205KB

  • MD5

    f8db5a62538d5ae9862d0d7f4b19dce4

  • SHA1

    88b2f2d678471de6ee719916cf1e07d105cd9596

  • SHA256

    5ccf06c1931134324b671f08db75d0e33ca4a3c6d896f5c3581ce9ed2547bc5a

  • SHA512

    9b638bf90773feb7d1b366370e07f0e8194f30b99281f9e6ab1d604c89a51cc4567c8847e605fba0d2594f629f372e4bdbc00be38383aa2d6ecb97460b158a38

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5ccf06c1931134324b671f08db75d0e33ca4a3c6d896f5c3581ce9ed2547bc5a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections