General

  • Target

    Amadey.exe

  • Size

    226KB

  • MD5

    aebaf57299cd368f842cfa98f3b1658c

  • SHA1

    cb4642f3425e8827e54a95c99a4b7aa1ae91d9b7

  • SHA256

    d9131553ec5337523055e425db82038f4250fa60ea581bcc6921716477c652ce

  • SHA512

    989ffc32678ae1505c3fb5befa9c281bfc87e33330bb5a23010a57766c4ce6dadbde86bd2a097ed8ac23195645abc50577dfe69191bb4bccdc77861488f6572e

  • SSDEEP

    6144:k5tErvkeLE0X7J7bhi1g6FKVu+dnX9ys8l+:CYkeg0Nbh6FKu+dnX

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://193.42.32.29/9bDc8sQ/index.php

Attributes
  • install_dir

    1ff8bec27e

  • install_file

    nhdues.exe

  • strings_key

    2efe1b48925e9abf268903d42284c46b

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • Amadey.exe
    .exe windows:6 windows x86

    b4e0be0bbc0b6cf93837773846d3b934


    Headers

    Imports

    Sections