Overview

overview

10

Static

static

10

2e12355cb9...b3.dll

windows7-x64

3

2e12355cb9...b3.dll

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2e12355cb9b11c923dc06f195399d678bc46680e982856d9405f64e7563fe8b3.dll

  • Size

    124KB

  • MD5

    7fe5b933ed9391ea24647479c80e904e

  • SHA1

    963721e46b8056e2e883c598e95d7daa7bdf8d9b

  • SHA256

    2e12355cb9b11c923dc06f195399d678bc46680e982856d9405f64e7563fe8b3

  • SHA512

    82d92d0c5155fff5ce97099cb9e78422ff328e0c516fbab7634e624215366c2191ec6ff6fe8d939268275c6770accb208af7ac69c3cc13c9188a49ef41339bb0

  • SSDEEP

    3072:wdkSZXB8ZuzQT7SgmEE8An/Y4Z3SNq6ZidU1ep/:LoGymSgjE8A3Z3yodUwp/

Score
10/10
d5db2damadey

Malware Config

Extracted

Family

amadey

Version

5.12

Botnet

d5db2d

C2

http://212.193.31.8

Attributes
  • strings_key

    0e18a2a9dd22cd0f87c9fba7075c3b39

  • url_paths

    /3ofn3jf3e2ljk2/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2e12355cb9b11c923dc06f195399d678bc46680e982856d9405f64e7563fe8b3.dll
    .dll windows:6 windows x86 arch:x86

    fdb088ba51afbf555d7a0f495212d8f1


    Headers

    Imports

    Exports

    Sections