Overview

overview

10

Static

static

10

winprofile

windows7-x64

10

winprofile

windows10-1703-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    5Ws27TS.exe

  • Size

    220KB

  • MD5

    daabc20f84ba8af7a876a101d3351840

  • SHA1

    f4234913e39ffbe12ed068be47c0b17b916b6198

  • SHA256

    5b8ac2361018ec64f73a45ff7f4e93ab7e53418a825542168751f48b74ec7cc6

  • SHA512

    caf70335c27ae78d6c80059cd5b71413a594f1ca78000ab692bc814042c81d5289f2cd68d92b759017d1a63a675e69754138c96402793fa94df2475e39f2edd4

  • SSDEEP

    6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.124.1/theme/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explothe.exe

  • strings_key

    36a96139c1118a354edf72b1080d4b2f

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 5Ws27TS.exe
    .exe windows:6 windows x86

    3865972614d44e518713c9a6183fed14


    Headers

    Imports

    Sections