General

  • Target

    7eda5dba702f83ca43a8201d9d77e7d4d3efe45bcb44466c484401d17c81a671

  • Size

    103KB

  • MD5

    fb8282d6f9e60ed4bab86295a7189ae7

  • SHA1

    365dd1f6ce885e8db986f0d66cc294f0fc9cd642

  • SHA256

    552b825b95da1394cf84ce6cc5c7d8db92165c6c6bd96c8f05269d60b35e0f6e

  • SHA512

    3435207c375d358e3eb530c6b5b6737824f07b88165faf2bcab5d0e4e502ef2c82ccb5db8d5b212d0d29784df4015e83eb7e4bfb9b3db661acbd3604602df993

  • SSDEEP

    3072:YLTzrHEDjomznpCacXyS+ZLRyy4c1m6J/N:YLXmD8hX8ZNyCm6xN

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 7eda5dba702f83ca43a8201d9d77e7d4d3efe45bcb44466c484401d17c81a671
    .zip
  • 7eda5dba702f83ca43a8201d9d77e7d4d3efe45bcb44466c484401d17c81a671
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections