General

  • Target

    l7792016.exe

  • Size

    223KB

  • MD5

    aea234064483f651010cf9d981f59fea

  • SHA1

    002ad73a666d2d92d0c6d6b617e61c6fa0c5f3a6

  • SHA256

    58b02c8b4bc2bf7f5f1e8e45d7c206956f188ae56b648922ca75987b999db503

  • SHA512

    eae415ef55aeb1b4548c2422a72e618fce17c2c1322918d33dc6b9202a01c743a5684ba28e5d83b6cdb2b703bc12569e6bb0e87ef2decb4e8a18592e1380a434

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • l7792016.exe
    .exe windows x86

    698e68059e2b8538f873da69a2766d48


    Headers

    Imports

    Sections