Overview

overview

10

Static

static

10

212e8cbc9a...3b.exe

windows7-x64

10

212e8cbc9a...3b.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    212e8cbc9a69df7ca07dd579238f1d061b4066365274c7491fa14e6b64bc903b

  • Size

    103KB

  • MD5

    9aa0f222731567e3f2ffcae8c89897a5

  • SHA1

    227c5553de01f90a2ba774f5715a4e5cf721bf44

  • SHA256

    3ea0ba97ad84a174a00ab7f04c2d77fd86d246613854fa6ecfc86859b0258940

  • SHA512

    8266a142b207674078e18d5a62a96d9473a0787860d44fad21f9a463b2b20eccb17818cfed3476f42d1f23b7cf6fbdefb48b6be085f53981ea4b5e1496474a5a

  • SSDEEP

    3072:cLTzrHEDjomznpCacXyS+ZLRyy401G6JP3:cLXmD8hX8ZNyqG6B3

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 212e8cbc9a69df7ca07dd579238f1d061b4066365274c7491fa14e6b64bc903b
    .zip
  • 212e8cbc9a69df7ca07dd579238f1d061b4066365274c7491fa14e6b64bc903b
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections