Overview

overview

10

Static

static

10

1a085e1452...21.dll

windows7-x64

3

1a085e1452...21.dll

windows10-2004-x64

3

Sharing

Copy URL Twitter E-mail

General

  • Target

    1a085e145268798a5d9cb955eb3ab785b76e5c1aef2ff60fed45d81fcb8e2421

  • Size

    127KB

  • MD5

    bd38b3834594180499a656b6cf3dfab0

  • SHA1

    5212c8372d1f205a5bc59e03e752fcfd48f5c1b2

  • SHA256

    1a085e145268798a5d9cb955eb3ab785b76e5c1aef2ff60fed45d81fcb8e2421

  • SHA512

    da5184c3bbcb42d3389ab6360ce4c62a0235bab0f35ded4c267761fbb53a2d2b525cbd91c9c299fa8e6090aa956614639d440561ccbee243f6438e3b33ee580b

  • SSDEEP

    3072:T8hfQUx++uUwqUjWkuVPfrHaa/09adnw62xm4+5j:ARQUELNjTuVPTaQwA5j

Score
10/10
41cd5famadey

Malware Config

Extracted

Family

amadey

Version

4.41

Botnet

41cd5f

C2

http://specificsecurity.ru

Attributes
  • strings_key

    7ddd79f3dbc40c57a6e985f4fb083fba

  • url_paths

    /NfjxzZz7jn/index.php

    /NfjxzZz8jn/index.php

    /NfjxzZz9jn/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1a085e145268798a5d9cb955eb3ab785b76e5c1aef2ff60fed45d81fcb8e2421
    .dll windows:6 windows x86 arch:x86

    61d6334c6ae4948c906d9fa7fdf019fa


    Headers

    Imports

    Exports

    Sections