Overview

overview

10

Static

static

10

379bb9a8ba...fb.exe

windows7-x64

10

379bb9a8ba...fb.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    379bb9a8bacdd3f6c402ce4970b822fc7c710a7c39198fbf7aaa896d0310ccfb

  • Size

    103KB

  • MD5

    a16bee5341253dcd56f4c91fcf22373d

  • SHA1

    00c15b1ce55c8b93732f18a967bdd570f5ca2101

  • SHA256

    41b307dfc22a5402ae14e516187e91dd376eac8990b1b41a8358abd68cd226bf

  • SHA512

    e0383c1fe80d75e79a35e898cb31d541914a8b6d77b14d3fc63cdf72b47bb000d3393f91761cad24685e7229b90abf89e4126b0b76a27f1c4c2aedb430618f08

  • SSDEEP

    3072:yLTzrHEDjomznpCacXyS+ZLRyy4c1m6J/h:yLXmD8hX8ZNyCm6xh

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 379bb9a8bacdd3f6c402ce4970b822fc7c710a7c39198fbf7aaa896d0310ccfb
    .zip
  • 379bb9a8bacdd3f6c402ce4970b822fc7c710a7c39198fbf7aaa896d0310ccfb
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections