Overview

overview

10

Static

static

Ejecución...49.exe

windows7_x64

10

Ejecución...49.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    Ejecución_De_Embargo1087682524110440457384889987429350028591104178436174773663625753785856169508441070649.exe
  • Size 250KB
  • Sample210224-d8dgvcej2n
  • SHA256 4ae3ca87d8086b3d8beaca35c8d69db7b477f84111486caba6ff9682c5704b57
  • MD5 SHA1 SHA512
Score
10/10
amadeytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 2.11

C2

  • 176.111.174.67/7Ndd3SnW/index.php

Targets

    • Target
      Ejecución_De_Embargo1087682524110440457384889987429350028591104178436174773663625753785856169508441070649.exe
    • Size 250KB
    • SHA256 4ae3ca87d8086b3d8beaca35c8d69db7b477f84111486caba6ff9682c5704b57
    • MD5 SHA1 SHA512
    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Blocklisted process makes network request

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks