Overview

overview

10

Static

static

10

b00302c7a3...65.exe

windows7-x64

10

b00302c7a3...65.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    samples.zip

  • Size

    110KB

  • MD5

    a51d1208e587250b79b46e0af954ca65

  • SHA1

    3f693e7050f823fe9e42d5297a3805f4d07fa7bd

  • SHA256

    c3f8fa15de7270ae9998b33c1ef0c89c41a9a827cddee9270d4c43a216032206

  • SHA512

    52c17e3c98efa2ecccfec74e334a839b9ab02742c4a7670bc986e0def849594fac9d4791a4eed9c550ef4616da9eb3a657eac599cb913cb016038df5db9de240

  • SSDEEP

    3072:Yt4asn+dt19gAIcHWy7hR//6BbdisKGj92w8Z:Ytxsn+dt1ndHTVUp13j925

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.66

C2

http://62.204.41.242

Attributes
  • install_dir

    4b9a106e76

  • install_file

    nbveek.exe

  • strings_key

    363c314b34b4864ac6a85f962c5ac734

  • url_paths

    /9vZbns/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • samples.zip
    .zip

    Password: infected

  • b00302c7a37d30e1d649945bce637c2be5ef5a1055e572df9866ef8281964b65
    .exe windows:6 windows x86 arch:x86

    dd0e4efabc62274a7cfb37b4b7a2951d


    Headers

    Imports

    Sections