Overview

overview

10

Static

static

10

47f518507f...4a.exe

windows7-x64

10

47f518507f...4a.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    47f518507f1b2830a5f5f56194f3c708a71b1b4a.rl

  • Size

    227KB

  • MD5

    2bd8c7c2002b12dd79b325f9d60ce051

  • SHA1

    47f518507f1b2830a5f5f56194f3c708a71b1b4a

  • SHA256

    d10968cbd2fae91a604c0231fd296914c1db133da052d8af14efd4faf50b5ae0

  • SHA512

    607cc2f9a37e14f4cd1c80304601339d6be6e46587d7a5fdb5c3789ca526d7086db5053edf60a5ff6b21630cd82898cb32756daa236d41b5f0f4ce730b769a93

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.86

C2

http://77.91.68.61

Attributes
  • install_dir

    925e7e99c5

  • install_file

    pdates.exe

  • strings_key

    ada76b8b0e1f6892ee93c20ab8946117

  • url_paths

    /rock/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 47f518507f1b2830a5f5f56194f3c708a71b1b4a.rl
    .exe windows:6 windows x86 arch:x86

    698e68059e2b8538f873da69a2766d48


    Headers

    Imports

    Sections