Overview

overview

10

Static

static

10

ff96c05cc5...b2.exe

windows7_x64

10

ff96c05cc5...b2.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ff96c05cc539eae59ea43c37f1996372589b33aa2ba3a9bdc5a1e7b20b1f75b2.exe
  • Size 204KB
  • Sample211002-gre1esdhel
  • SHA256 ff96c05cc539eae59ea43c37f1996372589b33aa2ba3a9bdc5a1e7b20b1f75b2
  • MD5 SHA1 SHA512
Score
10/10
amadeysuricatatrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 2.70

C2

  • 185.215.113.45/g4MbvE/index.php

Targets

    • Target
      ff96c05cc539eae59ea43c37f1996372589b33aa2ba3a9bdc5a1e7b20b1f75b2.exe
    • Size 204KB
    • SHA256 ff96c05cc539eae59ea43c37f1996372589b33aa2ba3a9bdc5a1e7b20b1f75b2
    • MD5 SHA1 SHA512
    Score
    10/10
    amadeysuricatatrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • suricata: ET MALWARE Amadey CnC Check-In

      suricata: ET MALWARE Amadey CnC Check-In

      suricata

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks