Overview

overview

10

Static

static

10

3dc960c801...12.exe

windows7-x64

10

3dc960c801...12.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    3dc960c801780d8f1f6f2a3923b7db2b2a54444c0b55fc8ba054e6077dd65712

  • Size

    103KB

  • MD5

    a4e86609026307d97b515c2fa84074b8

  • SHA1

    10cc3a6b2c9b6b506d179a22cbac2d13df84a238

  • SHA256

    f29a27116b2fd27191cf3996f3a7b7e747789b6ce30ae9c547dce0c9a4809f21

  • SHA512

    082aeaecf06383b9ad3780575170f41c7ca6eed3c2a616e64fac075a1384cecf2b1815e9d6e2eb86b6717873ceda152bdbed720f152e55e07dabe02134ae77b7

  • SSDEEP

    3072:HLTzrHEDjomznpCacXyS+ZLRyy4c1m6J/D:HLXmD8hX8ZNyCm6xD

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.68.52/mac/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explonde.exe

  • strings_key

    916aae73606d7a9e02a1d3b47c199688

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 3dc960c801780d8f1f6f2a3923b7db2b2a54444c0b55fc8ba054e6077dd65712
    .zip
  • 3dc960c801780d8f1f6f2a3923b7db2b2a54444c0b55fc8ba054e6077dd65712
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections