Overview

overview

10

Static

static

10

cf5cc29a0b...df.exe

windows7-x64

10

cf5cc29a0b...df.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    cf5cc29a0b750fc9b58f3d0ff9cfc1307e4d30edf3576c9c88b5d08a4a993adf

  • Size

    103KB

  • MD5

    8449db51d55f2b305a4e7dbc13d90f91

  • SHA1

    c4ab4f635453ffd7127daf598810ad93f693656c

  • SHA256

    2de1aae712c29dcb0b209563af53f40880da4cb07311888d532a9158eee3d347

  • SHA512

    46c241123efc14e65b25d8a3660c9bfc9ee2427ea581e14bd8abf1183ffa9dcf435efc35a4b776fdb9bd497d20c3a118710b437b4b0f0bb6a3ce7e0106653874

  • SSDEEP

    1536:voLT6krr7jsW2LDjA3KvhdOQXhtJFfpB+Faca4VFoZS+IkyYFjreIxmH4hj+S4Hh:QLTzrHEDjomznpCacXyS+ZLRyy4EMd

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • cf5cc29a0b750fc9b58f3d0ff9cfc1307e4d30edf3576c9c88b5d08a4a993adf
    .zip
  • cf5cc29a0b750fc9b58f3d0ff9cfc1307e4d30edf3576c9c88b5d08a4a993adf
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections