Overview

overview

10

Static

static

10

15800eefdf...4e.exe

windows7-x64

10

15800eefdf...4e.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    15800eefdfd1a8fece335d8a9ef4732188ba147f237d1159c23293a8e5a6ab4e

  • Size

    103KB

  • MD5

    44d2b8fa70456ee06a72103b18409834

  • SHA1

    dde77bb13004c1d726e70b27e53580c6a02ebf84

  • SHA256

    5294ca11db1a451ea14ac98594233033ba1b45554f3bbfb8e60616b1509a2943

  • SHA512

    8f11e6c46ff7dbc9b334cf0a4e69d099116fd50c9f81b9fdab84d72e3f74a8c4867a1977a1856f6076253617da4142a2c2045ec03b00e740f12f0f17edad1f7e

  • SSDEEP

    3072:XLTzrHEDjomznpCacXyS+ZLRyy4c1m6J/Y:XLXmD8hX8ZNyCm6xY

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 15800eefdfd1a8fece335d8a9ef4732188ba147f237d1159c23293a8e5a6ab4e
    .zip
  • 15800eefdfd1a8fece335d8a9ef4732188ba147f237d1159c23293a8e5a6ab4e
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections