General

  • Target

    dbb52e2feef48f9c00de87ab47bf64bc.bin

  • Size

    322KB

  • MD5

    dbb52e2feef48f9c00de87ab47bf64bc

  • SHA1

    7520be67534a1550f39de2edcc92a42ca7bcda45

  • SHA256

    0bdd8505c7169022ef4a78aa337ff3d2700008d20673d0d23ef1760993a53dff

  • SHA512

    d70fdb25caeaa61b8732c75365331689f7a2e93d2f82e6a0fb363e73a03a6b7821d3ca626a23e56eda48eca3156336b61a6bf60cfe15149b2f0fcc063d640d7e

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • dbb52e2feef48f9c00de87ab47bf64bc.bin
    .exe windows x86

    44e769941d2c6ad88bf42ac4adb36135


    Headers

    Imports

    Sections