Overview

overview

10

Static

static

10

tmp.exe

windows7-x64

10

tmp.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    tmp

  • Size

    418KB

  • MD5

    0aca798eb9951ab0dd5e92723e3d2664

  • SHA1

    33ecc4ff22947e411621c8f4cd4719cd95669194

  • SHA256

    12e5e5bba84f2a618310f72a7fbb40e04bf2f221a13145b3a91bb4707d7130c1

  • SHA512

    22f711e5d259d85c31786ad4d8cde81474514f4690fd0c2d108ebb6e27d54bdc88bb46ba4aafe1a2aca94fd70f92adf4829d37e89e9e32e545d926cc7ba2d942

  • SSDEEP

    6144:ZoKCcjSrSPsMJPZ/P3+9303XH5Tv7b9cOVX2j+Hk4fZ6A4zmL5RqfMvmgpum+bg0:ZoLX+B131bc54fk7mLrPvmgpum+bZ

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

4.13

C2

http://5.42.65.125

Attributes
  • install_dir

    0de90fc5c7

  • install_file

    Utsysc.exe

  • strings_key

    b34dd8f60e55add4645c4650cc7f7e7e

  • url_paths

    /k92lsA3dpb/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • tmp
    .exe windows:6 windows x86 arch:x86

    d0db1addc5d20c6bf2731d82832030a0


    Headers

    Imports

    Sections