Overview

overview

10

Static

static

10

8cd32c01ba...0b.exe

windows7-x64

10

8cd32c01ba...0b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    8cd32c01ba6e40efb2c2bd8f3899149a529100f3b12ab890df7616495a15b20b.zip

  • Size

    89KB

  • MD5

    f9b897cb0a29d1cebfa4222eaf79237d

  • SHA1

    8fb867acab852717913560c0186a12f6d116cf35

  • SHA256

    62785d65a4a418f35b2773cfde0411e27cefd4facbd90ff3b4e23aa8ef46d74e

  • SHA512

    8ca71274a091f85b296cb51cddba7e5b96f9a10f5d44de500512f5ebcf4ab8a56fa4e758f5464aa06841d53555d758552c9e6d55c33eb54f2a179e5985010fae

  • SSDEEP

    1536:lNR/h0wnQpOtOxh78QQt59pM69cAvfmSHWIFhVyxz5RxzXNrKjSXxdBS8tpECioJ:rR50wnig6p8ftzh9hVyxZzXkjCt63fU

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.83

C2

77.91.68.62/wings/game/index.php

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 8cd32c01ba6e40efb2c2bd8f3899149a529100f3b12ab890df7616495a15b20b.zip
    .zip

    Password: infected

  • 8cd32c01ba6e40efb2c2bd8f3899149a529100f3b12ab890df7616495a15b20b
    .exe windows x86

    Password: infected

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections