Overview

overview

10

Static

static

10

2116-36-0x...ry.exe

windows7-x64

1

2116-36-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2116-36-0x00000000004C0000-0x0000000000535000-memory.dmp

  • Size

    468KB

  • MD5

    ce8d88ed2fd9b302c5f2ca0e622c333a

  • SHA1

    359bda39d4a87c03444df594334e109ab97720bc

  • SHA256

    4d65afff7824094484c29bd9221f0e2f7de42d716a84008c14777058251af41e

  • SHA512

    6d93e7c5b168720abbdd363671f94e3376ff02f255bac51a95e869215e4caaed401b7b06c83512bb2160f85752275361c5d05abb76991bb135955fdd352fca36

  • SSDEEP

    12288:/bSvdLqlG29ZH4IXXV/tdGpxFTYefNKWUmyyiRg:/p9ZHhdWNYUNKWUmpWg

Score
10/10
9c88c6amadey

Malware Config

Extracted

Family

amadey

Version

5.04

Botnet

9c88c6

Attributes
  • install_dir

    c0461fd49a

  • install_file

    Gxtuum.exe

  • strings_key

    1b8c0142f1804d4531696e70270c2eee

  • url_paths

    /pLQvfD4d5/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2116-36-0x00000000004C0000-0x0000000000535000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections