Overview

overview

10

Static

static

10

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_6ce20250ab5addfae0903cc0e3d3fb4c_amadey_black-basta_luca-stealer_smoke-loader

  • Size

    2.1MB

  • MD5

    6ce20250ab5addfae0903cc0e3d3fb4c

  • SHA1

    cfea9bc9fc5a5cbbe254e39c9d6a28a9b75d521f

  • SHA256

    04b753f9f181e456ea9ec95c597d32f0e178808d1b204fbe2c370da6659a6a79

  • SHA512

    5e7069b08142e562686971d6da85560ddac6cf66d965040aa6679065ece921b9bd3e976af0402ccc68f3dda0e88f2b20a649a94e45c88007b1128583d8e824ac

  • SSDEEP

    49152:Z/C3aPC2nav7cldn2xvnoWqWZXIvWskzgihOXh5:Z/C3aPO7wavobilv9C

Score
10/10
092155amadey

Malware Config

Extracted

Family

amadey

Version

5.21

Botnet

092155

C2

http://176.113.115.6

Attributes
  • install_dir

    bb556cff4a

  • install_file

    rapes.exe

  • strings_key

    a131b127e996a898cd19ffb2d92e481b

  • url_paths

    /Ni9kiput/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 2025-04-06_6ce20250ab5addfae0903cc0e3d3fb4c_amadey_black-basta_luca-stealer_smoke-loader
    .exe windows:6 windows x86 arch:x86

    2eabe9054cad5152567f0699947a2c5b


    Headers

    Imports

    Sections