Overview

overview

10

Static

static

10

4fe99dd52e...14.exe

windows7-x64

10

4fe99dd52e...14.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    4fe99dd52e67b34240bcead9ae75f616d9bedb2a17dea5f1e222d1bb56ed2014

  • Size

    103KB

  • MD5

    36fa9f785c6ee7da5ee5a5bfbf227b4b

  • SHA1

    efb266f26b17340d78c87cf2b8a30195dba77e11

  • SHA256

    cc0a4d5c67f7ce5ae496f13019c27815781e3382f37c4fa7f81ed3071404a4c2

  • SHA512

    6f0479387c8c572612e735b5a35cb8db980d344a716f3d0f0697d3827d3fe90b2112a7e7b93000b844e4edf9b36e798cdf7390b8c3813afacf3894d45365604f

  • SSDEEP

    3072:2LTzrHEDjomznpCacXyS+ZLRyy4d1G6JPb:2LXmD8hX8ZNyfG6Bb

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4fe99dd52e67b34240bcead9ae75f616d9bedb2a17dea5f1e222d1bb56ed2014
    .zip
  • 4fe99dd52e67b34240bcead9ae75f616d9bedb2a17dea5f1e222d1bb56ed2014
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections