General

  • Target

    0ddfe85d863047d7e382864ba2d06835407816dc6a6f82cb53370c44ec82e801

  • Size

    205KB

  • MD5

    29b39e546d626d2cb2481859f4dd47b4

  • SHA1

    5ad2097b9b458c72694401c576f54172f6a2d920

  • SHA256

    0ddfe85d863047d7e382864ba2d06835407816dc6a6f82cb53370c44ec82e801

  • SHA512

    3646431eb752adaf024de593ae5153dca3e9ee4d5d3befe14e5d30ae260e591b82da90b72b9eb028ae3608cb0bb417d088715487f026dfee1a50e53b8e41ae60

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0ddfe85d863047d7e382864ba2d06835407816dc6a6f82cb53370c44ec82e801
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections