Overview

overview

10

Static

static

10

25403ec46e...9b.exe

windows7-x64

3

25403ec46e...9b.exe

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    25403ec46eb30f04c39762d0628afa9b

  • Size

    219KB

  • MD5

    25403ec46eb30f04c39762d0628afa9b

  • SHA1

    17416c36db3215d805360b3c80de10c6c13fb7ab

  • SHA256

    f7d6c9c50343592278ee271b358cffd776408cf3f454d2a7f3652974d0836a77

  • SHA512

    278f20842bdb51315de789441f54558be310040ed3418d53192265987d5111b5226ba0a26ad73d6265df01edf746af6d04fa11996129936bc0875d97dc6c3bf2

  • SSDEEP

    3072:k1TokTHkoaNnoEzD/EiEOuUQbWYxBhFLSeqqOTWM2T38uw6rLsACcC99WAFzSHk:k1svoqnLvEiEYQiYxfF5xQ2ouw6HKlQk

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

2.41

C2

http://185.215.113.55

Attributes
  • install_dir

    e2370969ee

  • install_file

    rgbux.exe

  • strings_key

    fc41cd807f3050f687b4f89bd541f131

  • url_paths

    /t5BnOoke2/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 25403ec46eb30f04c39762d0628afa9b
    .exe windows:6 windows x86 arch:x86

    ef384b149dbfa1ae5ae19ca5a39b07e6


    Headers

    Imports

    Sections