General

  • Target

    13345e74ef41f9b6bc2c6f20720461c628784a519d3cdd4feead37c85aad7481

  • Size

    205KB

  • MD5

    d9818a55f348c4d1aebc93965c496a06

  • SHA1

    dd4f85cad8e79341e0c8062e7619a72533cd12f4

  • SHA256

    13345e74ef41f9b6bc2c6f20720461c628784a519d3cdd4feead37c85aad7481

  • SHA512

    e76e4c5bf30d278a605f3e77d48fe680af266f902e67a5959e422a9b62dc2cdae7bb994031a0a8f3361c4eaeb83e540551eef82f9e30acb302cad5d26e133dc1

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 13345e74ef41f9b6bc2c6f20720461c628784a519d3cdd4feead37c85aad7481
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections