Overview

overview

10

Static

static

10

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    file.exe

  • Size

    416KB

  • MD5

    897d350557c45f49b9fd780735b218e2

  • SHA1

    a8cfecfe05ed2d3765bf57178338f8a4e93ad6fb

  • SHA256

    ea4964f3eccefd735166a547f6fed7a123a292fab52f9a810936ccaabce8eaa9

  • SHA512

    b1b322f6b2044ec7a31508190eee60fc9502ad2d6ec302e4cd81f4cc05028f013ecedfabb3dda6037b85e94aebad85df394c00a35b679304328fd5ba4b96bae0

  • SSDEEP

    12288:cSqMakU3v+GYLWIjD9dSbvBG5u2uQjdQchw:Pq53v+G4Wwub8Ljac+

Score
10/10
20d4dcamadey

Malware Config

Extracted

Family

amadey

Version

4.41

Botnet

20d4dc

C2

http://154.216.17.4

Attributes
  • install_dir

    12584a06d7

  • install_file

    Hkbsse.exe

  • strings_key

    9702b8300602efd6db85ee70f3fd4073

  • url_paths

    /Dem7kTu/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • file.exe
    .exe windows:6 windows x86 arch:x86

    9c7c36eb46cc991a5074f8a811c4c46c


    Headers

    Imports

    Sections