Overview

overview

10

Static

static

10

c2f3fbbbe6...66.dll

windows7-x64

3

c2f3fbbbe6...66.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    c2f3fbbbe6d5f48a71b6b168b1485866.dll

  • Size

    124KB

  • MD5

    c2f3fbbbe6d5f48a71b6b168b1485866

  • SHA1

    1cd56cfc2dc07880b65bd8a1f5b7147633f5d553

  • SHA256

    c7ed512058bc924045144daa16701da10f244ac12a5ea2de901e59dce6470839

  • SHA512

    e211f18c2850987529336e0d20aa894533c1f6a8ae6745e320fd394a9481d3a956c719ac29627afd783e36e5429c0325b98e60aee2a830e75323c276c72f845a

  • SSDEEP

    3072:Vdu5ZXB8ZuzQT7SgmME8Yn/YoZ3SNqpidU1epf:WjGymSg7E8Y3Z3AdUwpf

Score
10/10
0f3be6amadey

Malware Config

Extracted

Family

amadey

Version

5.10

Botnet

0f3be6

C2

http://185.81.68.147

http://185.81.68.148
Attributes
  • strings_key

    d3a5912ea69ad34a2387af70c8be9e21

  • url_paths

    /7vhfjke3/index.php

    /8Fvu5jh4DbS/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • c2f3fbbbe6d5f48a71b6b168b1485866.dll
    .dll windows:6 windows x86 arch:x86

    fdb088ba51afbf555d7a0f495212d8f1


    Headers

    Imports

    Exports

    Sections