General

  • Target

    a65cd5df4823898419b5771b5b02cd2161ce770408c541ece5480b4ea79ed545

  • Size

    103KB

  • MD5

    d3ae4fb92e8be5c564c78fc10e8f7bdc

  • SHA1

    7f45361a2e986825978aded63eb793796fc9a15f

  • SHA256

    b2c5fac05957fdde9a80f15c1045755781f03965d3458690c664dc9a4ebaad1b

  • SHA512

    796f41b357e1cd1e3eea3925254087ff349b5371f6217aa944f56675656934d7eb6e44c7908a3c40e2d1a2d592b6c3c8f0e33627112ec99e0bae17f4610ef7a1

  • SSDEEP

    3072:CLTzrHEDjomznpCacXyS+ZLRyy4u1m6J3:CLXmD8hX8ZNyYm6t

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • a65cd5df4823898419b5771b5b02cd2161ce770408c541ece5480b4ea79ed545
    .zip
  • a65cd5df4823898419b5771b5b02cd2161ce770408c541ece5480b4ea79ed545
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections