Overview

overview

10

Static

static

10

2024-2-0x0...ry.exe

windows7-x64

10

2024-2-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    2024-2-0x0000000001100000-0x00000000015B8000-memory.dmp

  • Size

    4.7MB

  • MD5

    784b9a6c78601482ef9edea51058d4e0

  • SHA1

    8bdf20fd3b85ee05e727806348cba810d6d5ca36

  • SHA256

    3f7f370efec096be4dff6fba6afe74d1b4501dabe7be24ed51586e32440bba3c

  • SHA512

    0a36c7c81210876f8a7de6c0ed1016af2b0dd513eb7b956ee8700d095f652ea84d175c6cc23225fcc4eea4e114bb96c05a8f06da2b5b9512e53c94b8d9dc4ce8

  • SSDEEP

    98304:PJLJ4hCtEI7k8vPJFQu19igVncIL0SfVDjEhr+64+W:PDcmQubiKnP0SfVDAl+64

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

4.17

C2

http://185.215.113.32

Attributes
  • install_dir

    00c07260dc

  • install_file

    explorgu.exe

  • strings_key

    461809bd97c251ba0c0c8450c7055f1d

  • url_paths

    /yandex/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2024-2-0x0000000001100000-0x00000000015B8000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections