Overview

overview

10

Static

static

10

hdoqgihvw.exe

windows10-2004-x64

10

hdoqgihvw.exe

windows11-21h2-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    h.zip

  • Size

    272KB

  • MD5

    5ffaa2914787ee9676115b5515f5e46b

  • SHA1

    ffc7f921c64ffba43676bb8da883daa34cff083b

  • SHA256

    2d7fddd25a9bac1ad50e479cded38aebb623ce2a7a77e058b5a735fa4628f089

  • SHA512

    8fa0955b5de617d24cde0859d35e780432ccd5a670f28afa5babb5bad40b8c7d28f418a4a921ece47b275b1c5e36b62d0ef5363f7d19f9b71f5121f4ea64a790

  • SSDEEP

    6144:4RTQX8D1VRFaEE9jchNB4I3NkmNrIN74yY6TSTs:yTQXC1bEZcN/tsNMIZ

Score
10/10
76a1c5amadey

Malware Config

Extracted

Family

amadey

Version

5.03

Botnet

76a1c5

C2

http://185.208.158.96

Attributes
  • install_dir

    9b94b7e626

  • install_file

    Gxtuum.exe

  • strings_key

    7ec67893d851db775fae22819287705c

  • url_paths

    /mzmtrpwoe113ee/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • h.zip
    .zip
  • hdoqgihvw.exe
    .exe windows:6 windows x86 arch:x86

    91d1583dab6f50e9cc35b0dbf587fb1f


    Headers

    Imports

    Sections