General
- Target clip64.dll
- Size 124KB
- Sample250308-rye9waymw5
- SHA256 7817b60d8a52034bdfcaf9c0f08f52a86218e4cc44ffd2cb763d90aea26ea227
- MD5 50efc666b86b2e72b5a382daf6f49034
- SHA1 ec7c45b146e478b661be8da329f2ebaa9c5e6b4d
- SHA512 5f4efcc61a9da257699ce32312419ec98ddc10eae13ba12e660df98d079ede8d32b8ed34585a81aa62467dcc92bea4994362eee1b20d29b53e273bb96947da42
- SSDEEP 3072:jYZ27UeZm+wr7CImzEyv/Y4Z3SNqE4ZfYYOpf:ko7JfuCIsEyfZ3dYnpf
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
clip64.dll
Resource
win10ltsc2021-20250217-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
clip64.dll
Resource
win11-20250217-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
5.30
Botnet
-
652098
C2
-
http://185.125.50.8
Attributes
-
strings_key
bfbda6ae1db325c2ff4b455ce9896e6d
-
url_paths
/mVsXkjvb3/index.php
rc4.plain
Targets
-
- Target clip64.dll
- Size 124KB
- SHA256 7817b60d8a52034bdfcaf9c0f08f52a86218e4cc44ffd2cb763d90aea26ea227
- MD5 50efc666b86b2e72b5a382daf6f49034
- SHA1 ec7c45b146e478b661be8da329f2ebaa9c5e6b4d
- SHA512 5f4efcc61a9da257699ce32312419ec98ddc10eae13ba12e660df98d079ede8d32b8ed34585a81aa62467dcc92bea4994362eee1b20d29b53e273bb96947da42
- SSDEEP 3072:jYZ27UeZm+wr7CImzEyv/Y4Z3SNqE4ZfYYOpf:ko7JfuCIsEyfZ3dYnpf
- MD5 SHA1 SHA512 SSDEEP
Score3/10