Overview

overview

10

Static

static

10

64e271a34b...KI.exe

windows7-x64

10

64e271a34b...KI.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target

    64e271a34be67d396a0d9b6786353d80_NEIKI

  • Size

    205KB

  • MD5

    64e271a34be67d396a0d9b6786353d80

  • SHA1

    d008e4a344cbb8d88ccbe379a69aae0baffe38de

  • SHA256

    e06db4ac1e39a6fe5a740f23fa1c5fcf6a9879b33b4732598f57c411c198b1f6

  • SHA512

    69b8a768dd225a51ede00c93c9b335f428b65a613542aaeb8316722989f6116328c5bfb3db90009ea379510b409bf63954e9ed6b06170780353fd183ba19aede

  • SSDEEP

    3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXzeJX2vkMfSDPwU:Wfrnzurs3Czpexj2kGOIu5QTyJMKk

Score
10/10
amadey

Malware Config

Extracted

Family

amadey

Version

3.80

C2

http://193.3.19.154

Attributes
  • install_dir

    cb7ae701b3

  • install_file

    oneetx.exe

  • strings_key

    23b27c80db2465a8e1dc15491b69b82f

  • url_paths

    /store/games/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 64e271a34be67d396a0d9b6786353d80_NEIKI
    .exe windows:6 windows x86 arch:x86

    f8cc61ade86cb7277d0ab974de6323cb


    Headers

    Imports

    Sections