Resubmissions

23/08/2023, 09:42

230823-lpdf2acg3t 10

23/08/2023, 03:44

230823-eaqdqahe36 10

General

  • Target

    t2018607.exe

  • Size

    314KB

  • MD5

    8450820642d24597c6de19bf82be6f0e

  • SHA1

    5c8c738cbec42b9057f333fed5dcb33ef5000b24

  • SHA256

    a2ea84fc61f0d57c2b5e7df450815725681bff1575dd006bee436f498a2fee2b

  • SHA512

    b294dad958f0cb58978a401f6162eb999cc8b4d1ddec24be01c43a7de87279c3dfda526c3684701ac63156e80bf9d589e1a1330e97a34da31a461a6e450cc99b

  • SSDEEP

    6144:zR/tsQnf6X0M6+koYhXMxjwigfwfgbePu97rrAOQ322222KTq:zRlHVckoaXMxcePu97Hg22222iq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

193.233.255.9/nasa/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • t2018607.exe
    .exe windows x86

    44e769941d2c6ad88bf42ac4adb36135


    Headers

    Imports

    Sections