Overview

overview

10

Static

static

10

f95cbb58bc...81.exe

windows7-x64

1

f95cbb58bc...81.exe

windows10-2004-x64

1

Sharing

Copy URL Twitter E-mail

General

  • Target

    f95cbb58bc3cd23d1193f4a5a968f481.exe

  • Size

    423KB

  • MD5

    f95cbb58bc3cd23d1193f4a5a968f481

  • SHA1

    3bfbc7566b6d76ec2b0b577bc3447ed3f9bfe181

  • SHA256

    b26380b0e977fdb0d90f92963404163654aa39de3b43f8cab311b97eca3661f4

  • SHA512

    d8f4971c53f0b7513a52b57a916dac335d90a26c5c9dde601fad4713ea64e1b27c8fa0a5e73c2c074fb4a182698ac0b8903554983e6ded63c737ad5a89366547

  • SSDEEP

    12288:XpvhuwxAzkpbwoiqiNBN6uZeV8rUUrVx640:ZvhuwxIkR5iV+Urrj0

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

4.19

C2

http://kindofwelcomeperspective.com

Attributes
  • install_dir

    6f2bbbd7ea

  • install_file

    Dctooux.exe

  • strings_key

    20324a9a8b834f9495c3cd9f5d1f1b02

  • url_paths

    /8BvxwQdec3/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • f95cbb58bc3cd23d1193f4a5a968f481.exe
    .exe windows:6 windows x86 arch:x86

    02957bc2b3224ac679328d63f46407fa


    Headers

    Imports

    Sections