83f17052a7366bd07cacf01d9a6fcc31b6bcb5b89fc7f5320edbfa2de3c01b85
Classification: Malicious
83f17052a7366bd07cacf01d9a6fcc31b6bcb5b89fc7f5320edbfa2de3c01b85 is a malicious file sample. Linked to Amadey malware.
Detection summary
- 0 antivirus detections
- 4 IDS alerts
- 110 processes observed
- 6 contacted hosts
- 3 DNS requests
MITRE ATT&CK associations
Malware families: AMADEY (S1025)
Blacklist sightings
| Description | Source | First seen | Last seen | Labels | MITRE ATT&CK |
|---|---|---|---|---|---|
| Generic Malware | Hybrid-Analysis | 2024-06-07 13:15:04 | 2026-09-02 20:45:05 | malicious-activity | |
| Amadey | MalwareBazaar Abuse.ch | 2024-06-07 13:00:06 | 2024-06-07 13:00:06 | malicious-activity | S1025 Amadey |
Tags
windows-server-utility maliciousSample information
- Filenames
- 83f17052a7366bd07cacf01d9a6fcc31b6bcb5b89fc7f5320edbfa2de3c01b85, 2aab50071ed7cd04279bc8a6fac68280.exe
- File type
- PE32 executable (GUI) Intel 80386, for MS Windows
- Size
- 477696 bytes
- MD5
2aab50071ed7cd04279bc8a6fac68280- SHA-1
4884142b96c2b1f67d9ec57ae4de3253a6449976- SHA-256
83f17052a7366bd07cacf01d9a6fcc31b6bcb5b89fc7f5320edbfa2de3c01b85- First indexed
- 2024-06-07 13:03:57
- Last updated
- 2026-09-02 20:45:05
Network contacts
3.238.30.69 52.27.79.221 34.229.166.50 95.86.30.3 201.191.99.134 189.61.54.32
DNS requests
Process list
| Name | Command line |
|---|---|
| 2aab50071ed7cd04279bc8a6fac68280.exe | |
| WerFault.exe | -u -p 4816 -s 556 |
| WerFault.exe | -u -p 4816 -s 384 |
| WerFault.exe | -u -p 4816 -s 764 |
| WerFault.exe | -u -p 4816 -s 824 |
| WerFault.exe | -u -p 4816 -s 856 |
| WerFault.exe | -u -p 4816 -s 844 |
| WerFault.exe | -u -p 4816 -s 868 |
| WerFault.exe | -u -p 5116 -s 516 |
| WerFault.exe | -u -p 4816 -s 1156 |
| WerFault.exe | -u -p 4816 -s 1200 |
| Dctooux.exe | |
| WerFault.exe | -u -p 2852 -s 548 |
| WerFault.exe | -u -p 2852 -s 632 |
| WerFault.exe | -u -p 2852 -s 652 |
| WerFault.exe | -u -p 2852 -s 660 |
| WerFault.exe | -u -p 2852 -s 660 |
| WerFault.exe | -u -p 2852 -s 800 |
| WerFault.exe | -u -p 2852 -s 816 |
| WerFault.exe | -u -p 2852 -s 808 |
| WerFault.exe | -u -p 2852 -s 976 |
| WerFault.exe | -u -p 2852 -s 984 |
| WerFault.exe | -u -p 2852 -s 984 |
| WerFault.exe | -u -p 2852 -s 980 |
| WerFault.exe | -u -p 2852 -s 984 |
| WerFault.exe | -u -p 2852 -s 1196 |
| WerFault.exe | -u -p 2852 -s 788 |
| WerFault.exe | -u -p 2852 -s 788 |
| WerFault.exe | -u -p 2852 -s 1300 |
| WerFault.exe | -u -p 2852 -s 1424 |