Overview

overview

10

Static

static

10

C1D408D507...17.exe

windows7-x64

10

C1D408D507...17.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    C1D408D5074BC64FBA1A804306504D63FF2B1F25F2717.exe

  • Size

    215KB

  • MD5

    b38e053340c551e04347ee2c1ab673b5

  • SHA1

    2a974103ebf8eda2021f783c6a3a7f8c409872fe

  • SHA256

    c1d408d5074bc64fba1a804306504d63ff2b1f25f27171d5008a89dc41ab6705

  • SHA512

    40f24ea51f2fc747148b9194175e3440082ffe7011362d46d1208b83c62b79ced0d2ab7e157941e4640335cf499f80be6a24cdb3e794fcfcf6fa1b1529c65dec

  • SSDEEP

    3072:meTRJ0kHbnpN23kQKp5XzutZXKGrpeN84LuZAIybiy3xEfbi:FTR2AnpN2wDurXBeBuZAIMEj

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.83

C2

77.91.68.62/wings/game/index.php

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • C1D408D5074BC64FBA1A804306504D63FF2B1F25F2717.exe
    .exe windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections