General

  • Target

    0x0006000000022ffe33_JC.dat

  • Size

    329KB

  • MD5

    306fbae8d6cd825ff224013e2feb68d4

  • SHA1

    6edb4ba0bc7d1507db92a9ebb71505d2b57d1b99

  • SHA256

    abf19f0cdc40e93223a3ca5421c403e9c42d7cc57d1110bbaf539ef1e06fa667

  • SHA512

    0f9c37f21e79aa33886e0d1ebf4f2e9ea1537bc9010ff90b1b930f2a93b7966a7e8099ad7c1efa0d8db9abbecc0828881abc49179074aec13ac885bc0303eafa

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Attributes
  • install_dir

    b40d11255d

  • install_file

    saves.exe

  • strings_key

    fa622dfc42544927a6471829ee1fa9fe

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 0x0006000000022ffe33_JC.dat
    .exe windows x86

    44e769941d2c6ad88bf42ac4adb36135


    Headers

    Imports

    Sections