Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

6b5df7909e...ae.dll

windows7-x64

8

6b5df7909e...ae.dll

windows10-2004-x64

8

Sharing

Copy URL
Twitter E-mail

General

  • Target

    6b5df7909e349ce04b4ec2e3b02bd0f3c1f49173d7d1485946e4c4e9194e88ae.exe

  • Size

    1.2MB

  • MD5

    f9f252d2dfbb062e1ccc62df48e3b531

  • SHA1

    a3e0035cef91cf65ca9e447e408895993b371c0c

  • SHA256

    6b5df7909e349ce04b4ec2e3b02bd0f3c1f49173d7d1485946e4c4e9194e88ae

  • SHA512

    39f29169b8859edd5ead59ce5478f3044e127177b238d911f77c0cbab75a216dd2ee10c04c350098f9738815854af3fdce11fa675201364e75df0bf691294973

  • SSDEEP

    24576:/O/VvL5QafhQsnoXyaoMferXQ5rnxQBuLv8Y4fSffUO9l:S5nfhQzOMoA5rnxHv8BSUe

Score
10/10
c8dbfaamadey

Malware Config

Extracted

Family

amadey

Version

5.18

Botnet

c8dbfa

C2

http://92.255.57.155

Attributes
  • strings_key

    4cf32b4269fbd757b3711ecec2c5b9f0

  • url_paths

    /yXNwKVfkS28Y/index.php

rc4.plain
1
6799c0f0012efb43c917da9a4c26013f

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 6b5df7909e349ce04b4ec2e3b02bd0f3c1f49173d7d1485946e4c4e9194e88ae.exe
    .dll windows:6 windows x64 arch:x64

    3f175edea93fa7a76a78004d12de2235


    Headers

    Imports

    Exports

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.