General

  • Target

    b1d2b4bb41650a04764460c050c1d52defd83b7f5aa53c7e848f10870b46c1c9

  • Size

    103KB

  • MD5

    0aa69a90bb130153f226553d7ff823c6

  • SHA1

    38be605582db9520952dcaf453fab50d2ba6d428

  • SHA256

    ec02f4f3e91f6c92dc012f7885ca9722628d48613d14c485403d33e8c1b7fe90

  • SHA512

    f781898ee70e7b1a9d3ea74cdf494c2552a32d0b2594d9d4ab05724eb6ca3e6ed9d6bb32a1b6d79930f4e5e63e555b5c52142a5049c1575af89eb4c775539f50

  • SSDEEP

    3072:4LTzrHEDjomznpCacXyS+ZLRyy4c1m6J/n:4LXmD8hX8ZNyCm6xn

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • b1d2b4bb41650a04764460c050c1d52defd83b7f5aa53c7e848f10870b46c1c9
    .zip
  • b1d2b4bb41650a04764460c050c1d52defd83b7f5aa53c7e848f10870b46c1c9
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections