General

  • Target

    126ff4bf0a4fb4c95c59582211fb4ef375c05239001300a46a4424736d5234b5

  • Size

    205KB

  • MD5

    9849541b586460819f5c28d9d74eaf38

  • SHA1

    ba4d1ebcef2dfbfdf250462ee805b21936c64a50

  • SHA256

    126ff4bf0a4fb4c95c59582211fb4ef375c05239001300a46a4424736d5234b5

  • SHA512

    d382edff764a6b00cca513f4a166c014617be4e329609986acd88475b7ccc9ff1d26e85b863d6c9a787beebb777216a363efc0c1d304aaf39dc6955e8f702f43

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 126ff4bf0a4fb4c95c59582211fb4ef375c05239001300a46a4424736d5234b5
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections