Overview

overview

10

Static

static

10

explorhe.exe

windows7-x64

10

explorhe.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    explorhe.bin

  • Size

    426KB

  • MD5

    9a0b7ee713610b8395c8f0580a3b1e3d

  • SHA1

    e44a9e7ec6fe06ae6ba1b9518db78e95ad451942

  • SHA256

    6b8e428cff996c49aa52e017213c7016880a2bc1583d051240c74992bf83c357

  • SHA512

    0f7acbc99ef4b91eba1db5b50a352f29432da25bbd3c4364947dad3d1ce2ccc3b9f95f75e66a22cd11d7fcd8bfcc6903ba646b2e8543767bce4b6b786736f8fc

  • SSDEEP

    6144:1OP1cLnbZQOvBM1nGT7SVJEeFRuhuRlOBC+3hmHfqYr5PcfT5m0JuGeFxACt70+N:cPkOOKGNeZ6C+RpYrtS5m0JuGeFxZ06

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

4.15

C2

http://185.215.113.68

Attributes
  • install_dir

    d887ceb89d

  • install_file

    explorhe.exe

  • strings_key

    7cadc181267fafff9df8503e730d60e1

  • url_paths

    /theme/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • explorhe.bin
    .exe windows:6 windows x86 arch:x86

    d0db1addc5d20c6bf2731d82832030a0


    Headers

    Imports

    Sections