Overview

overview

10

Static

static

10

2220-2-0x0...ry.exe

windows7-x64

2220-2-0x0...ry.exe

windows10-2004-x64

Sharing

Copy URL Twitter E-mail

General

  • Target

    2220-2-0x0000000000B50000-0x00000000013D0000-memory.dmp

  • Size

    8.5MB

  • MD5

    9e3257304ae0f9d53613aaf6a17ba06a

  • SHA1

    56c29cdabb32c58fb8e2b9aa7524e6aea02d0421

  • SHA256

    56cf42b7bbeed3da0411fb1fc59e261ee83999a60ff5937b6e2ff7cc38a93efa

  • SHA512

    77a4e45d74e1b4246af8fb17bc0658f27d341a68986cb0603ae55e4f1b5fe16ee3ecd8cf360ec0e05a718cbbbf0566a2d8c39544dc0550241a85bf7926a9447e

  • SSDEEP

    196608:/LAmZt14zUHJt1rAZN0wOBi+UR5FGJhnGyzxdhSj8:ccmzmvBUOBSuhhSj

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

4.13

C2

http://185.172.128.5

Attributes
  • install_dir

    4fdb51ccdc

  • install_file

    Utsysc.exe

  • strings_key

    11bb398ff31ee80d2c37571aecd1d36d

  • url_paths

    /v8sjh3hs8/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2220-2-0x0000000000B50000-0x00000000013D0000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections