General

  • Target

    a9f60731caa75ec4b13c9433124bc6e8011c44c7b2e1cf62dce637cf637d6a14

  • Size

    205KB

  • MD5

    070565fd9265f2b67bf4b7c3e690bfc7

  • SHA1

    46ae87063a7879d7839253d832b1515fd5c76089

  • SHA256

    a9f60731caa75ec4b13c9433124bc6e8011c44c7b2e1cf62dce637cf637d6a14

  • SHA512

    73fcd76457edbb9230bd7e5bec0a93d517bd8eb933bd78a16a0b3a76a489636a7bf9d0548f06d9073252ffe4c3e964532fb7b6b28c656c5a71dd358907342486

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a9f60731caa75ec4b13c9433124bc6e8011c44c7b2e1cf62dce637cf637d6a14
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections