Overview

overview

10

Static

static

10

faa6af0857...58.exe

windows7-x64

3

faa6af0857...58.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    faa6af085703ecba02fedd4b4efab5307ea76d58.rl

  • Size

    204KB

  • MD5

    8a9d2b8da6926cd60e0fe2245a2160e8

  • SHA1

    faa6af085703ecba02fedd4b4efab5307ea76d58

  • SHA256

    cf931d4c2ba38602d176362a18f35bf6398a4266471d11f8d8b39a2d4fee378f

  • SHA512

    a8fdfd065eca4864d16c154ed333ceef4087cedf41f8756be0b8a29025961f5480f32ba63f449434f9e8dfef4fc0f2b5a230fcc83c1d1e78258e951bfc779811

  • SSDEEP

    3072:cpxiMVc/oooAUNfLp1zuNW3KG7uON8wAuZA+6ebe83xfQC5kmh:yiMV5oofVu432OiuZAlg4C

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.81

C2

http://95.214.27.98/cronus/index.php

Attributes
  • install_dir

    41bde21dc7

  • install_file

    legends.exe

  • strings_key

    bae43eaf0e6d2f97be94bf5e16e82178

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • faa6af085703ecba02fedd4b4efab5307ea76d58.rl
    .exe windows:6 windows x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections