General

  • Target

    2aad9acafbdb2a5cdd33ecf98bd6ba8889091db8b4f10d00daa40a381560c9cb

  • Size

    103KB

  • MD5

    a75a052a763120cd0a8621a93c0bd63c

  • SHA1

    50633ef46ee03ca5d442560543769426d56ccbad

  • SHA256

    18c252d05c8bac5121836669ba91aff5e8639796ed3807ae54c1c804a78cd08a

  • SHA512

    d1da6ba2ad726fffc06d69f6be9adf98b8d92276d6fe52493b51cf51eb1dcb8487fe4a1af116f82b512fb3aec580d3081834ea880bb3cb020b5a7496e2d79974

  • SSDEEP

    3072:FLTzrHEDjomznpCacXyS+ZLRyy4c1m6J/z:FLXmD8hX8ZNyCm6xz

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2aad9acafbdb2a5cdd33ecf98bd6ba8889091db8b4f10d00daa40a381560c9cb
    .zip
  • 2aad9acafbdb2a5cdd33ecf98bd6ba8889091db8b4f10d00daa40a381560c9cb
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections