Overview

overview

10

Static

static

10

f98013e59e...c7.exe

windows7-x64

10

f98013e59e...c7.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    f98013e59ef2f6b929efd4e0dc6aa3d5c92b7722849301f1ad680482cc6083c7

  • Size

    103KB

  • MD5

    b91f3390193e30888ef06527abb2cfbe

  • SHA1

    0ab4d097ef1829551f85ac01565e213b7b622564

  • SHA256

    70d5bf9188c6d496749197844466d74902bac6a82f6feec7dd07ce504ba90fcc

  • SHA512

    75bd4457081e3933dfda799eb145c2b481e4c81ee727ad2e11a9990c98552bde409c8f195df18c1571595c075613b432f60107bc613459dd0e85f5a7acef2d10

  • SSDEEP

    3072:KLTzrHEDjomznpCacXyS+ZLRyy4d1G6JPv:KLXmD8hX8ZNyfG6Bv

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f98013e59ef2f6b929efd4e0dc6aa3d5c92b7722849301f1ad680482cc6083c7
    .zip
  • f98013e59ef2f6b929efd4e0dc6aa3d5c92b7722849301f1ad680482cc6083c7
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections