Overview

overview

10

Static

static

3abf0b6da0...26.exe

windows7_x64

10

3abf0b6da0...26.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    3abf0b6da06a8740f91acf87b964de2b314220cf14226b003af9c97acd2ce926.exe
  • Size 295KB
  • Sample210220-4a8dbsjf12
  • SHA256 3abf0b6da06a8740f91acf87b964de2b314220cf14226b003af9c97acd2ce926
  • MD5 SHA1 SHA512
Score
10/10
amadeytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 2.11

C2

  • 176.111.174.67/7Ndd3SnW/index.php

Targets

    • Target
      3abf0b6da06a8740f91acf87b964de2b314220cf14226b003af9c97acd2ce926.exe
    • Size 295KB
    • SHA256 3abf0b6da06a8740f91acf87b964de2b314220cf14226b003af9c97acd2ce926
    • MD5 SHA1 SHA512
    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks