Overview

overview

10

Static

static

10

2624-26-0x...ry.exe

windows7-x64

1

2624-26-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2624-26-0x0000000000080000-0x000000000010D000-memory.dmp

  • Size

    564KB

  • MD5

    8ec5507b0ccde7fc0111303cef61025c

  • SHA1

    ab834f686e857ec1c972cf4fca3eaaf56b97cfd1

  • SHA256

    ccdde999827dc3a74a58dbe4d9dd38cef43be9a277b50c02aacde962273f9230

  • SHA512

    5a2d481a745c0272a8b7bf693e530ad78dc6287447ecaefa3e83f1fde8c0b0145dc28d4f126c4d8b05b0a472e68b62195d7053a96c824c16ba0a416ccc280b9f

  • SSDEEP

    12288:wvVPyleS95rw0PXxXphWtpFnUOnFCViWRg1:b95rFhK5U8Fnyg1

Score
10/10
9c88c6amadey

Malware Config

Extracted

Family

amadey

Version

5.04

Botnet

9c88c6

Attributes
  • install_dir

    c0461fd49a

  • install_file

    Gxtuum.exe

  • strings_key

    1b8c0142f1804d4531696e70270c2eee

  • url_paths

    /pLQvfD4d5/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2624-26-0x0000000000080000-0x000000000010D000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections