General
- Target msu.exe
- Size 415KB
- Sample261014-tp7nwaxyh1
- SHA256 d86db95a8cc304faca7071af49f59c239db0af6683e01eb5852650706d180f04
- MD5 409a8ea15374821bc5224499ba3dc67f
- SHA1 75c78c31a90f446af8838aa0caaca6365950992b
- SHA512 7b584862b3aa0679f3a7493a4eacbd72d2d962961454e02350b4d01bb76c1294016f275e34db8f3de3e5bd30d5875ff6c18dbfe2684d07b6770d9b57d0fd484d
- SSDEEP 12288:69/zsxH40DFHgSBRH6/pUOwSiOrvBySU:6KxbJ/6RUOpxv6
- TLSH T1C6945B31381BD032D66091B11E7AFFF685ADAC259B7105DBB7C40E77A9201D26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Behavioral task
behavioral1
Sample
msu.exe
Resource
win10v2004-20260911-en
2 signatures
150 seconds
Behavioral task
behavioral2
Sample
msu.exe
Resource
win11ltsc2024-20260911-en
2 signatures
150 seconds
Malware Config
Extracted
Family
-
amadey
Version
-
6.01
C2
-
http://109.238.87.75
Attributes
-
install_dir
1e2ce0e70e
-
install_file
Wrzcp.exe
-
strings_key
03bba9646165c9d9b8cf9cd339319bc6
-
url_paths
/g84kfS5n/index.php
rc4.plain
Targets
-
- Target msu.exe
- Size 415KB
- SHA256 d86db95a8cc304faca7071af49f59c239db0af6683e01eb5852650706d180f04
- MD5 409a8ea15374821bc5224499ba3dc67f
- SHA1 75c78c31a90f446af8838aa0caaca6365950992b
- SHA512 7b584862b3aa0679f3a7493a4eacbd72d2d962961454e02350b4d01bb76c1294016f275e34db8f3de3e5bd30d5875ff6c18dbfe2684d07b6770d9b57d0fd484d
- SSDEEP 12288:69/zsxH40DFHgSBRH6/pUOwSiOrvBySU:6KxbJ/6RUOpxv6
- TLSH T1C6945B31381BD032D66091B11E7AFFF685ADAC259B7105DBB7C40E77A9201D26A31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score3/10