General

  • Target

    2b1ed40e46e4fcb55fcb77ed32047f4b10f41bdbfe0b07461ee1240ea4ea71eb

  • Size

    103KB

  • MD5

    90d6c9850cfac69ecb7a219c90c152c7

  • SHA1

    d871547e0aa23db9c56eb7c2b9504436032a22fa

  • SHA256

    01c4b6b28713732c6150f4e0076faf575d29ba6555b5ce846ed6ed793116260d

  • SHA512

    5d2beebb2d001a09c3d8d1a8d72484b256b4f1129271f8a280ef6a17d24d18b93a43ac7aecaa74440b3d99ac94080a777fa30b3e513bd7ee7e788a3ffb2d846b

  • SSDEEP

    3072:iLTzrHEDjomznpCacXyS+ZLRyy4u1m6Js:iLXmD8hX8ZNyYm6S

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2b1ed40e46e4fcb55fcb77ed32047f4b10f41bdbfe0b07461ee1240ea4ea71eb
    .zip
  • 2b1ed40e46e4fcb55fcb77ed32047f4b10f41bdbfe0b07461ee1240ea4ea71eb
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections