General

  • Target

    59f0a6aede0b889c883b11fb842a5d3fe8d06647777b8591fc0ee87954659c3a

  • Size

    205KB

  • MD5

    205215af69b01c53548cb0eb3f0e6a5c

  • SHA1

    5eafce095bc185f33277e1178356f23b4bd73876

  • SHA256

    59f0a6aede0b889c883b11fb842a5d3fe8d06647777b8591fc0ee87954659c3a

  • SHA512

    d8eec14e15f37b8f1ec389bd4651767b354ac2728d588e1b63d4e19672ef9dec9b9750f720b6b5aeab3c9a29460d5b0efc43dea5121bc7eacc37075708de917f

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 59f0a6aede0b889c883b11fb842a5d3fe8d06647777b8591fc0ee87954659c3a
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections