General

  • Target

    Adjunto_Proceso.001

  • Size

    140KB

  • Sample

    210428-k2avv1nmf2

  • MD5

    8eddadb163629b2cae26f7234f7879a3

  • SHA1

    75d3210aa6d4572627dfe15d0c49e0e935810587

  • SHA256

    1a0fc716df2aaea6311e13f82876e480d67cb00e0d00edaf3c951680345e09ee

  • SHA512

    b67c46bdfbb178d4897406fc4575f2ef49a554a85bfc8c3fc4cd65d9f27b6f20f0c19970735cc1adc5937df42babfbbd66976b96ec6151cc09e07537741d0e5c

Score
10/10

Malware Config

Extracted

Family

amadey

Version

2.07

C2

91.241.19.159/m7vvsw2dsQ/index.php

Targets

    • Target

      Adjunto_Proceso1159053360219356057515895880171706833161103260887741240841058140923252684100109.exe

    • Size

      175KB

    • MD5

      136bd504e06a16d6445dfc2a1cb760dc

    • SHA1

      6e74816383a468a689cb9b7246d22ea52709c4ed

    • SHA256

      ebef156f24d25f052c5a1769216b9387b7d4e2ddbe4004d9304c71d2045c4d71

    • SHA512

      73022014ddbc0cfffbfde82369f83d41a30399ffd9792000f68b1925640815c9ca92231194972dffa193fff4cbe73a864841013a9a86507e7afb5f36e244cb80

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

MITRE ATT&CK Matrix ATT&CK v6

Discovery

System Information Discovery

1
T1082

Tasks