Overview

overview

10

Static

static

file.exe

windows7-x64

10

file.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target

    file

  • Size

    324KB

  • Sample

    221105-y27xmabham

  • MD5

    b1a6c5c5fd35c6bcab924ddf3e5f5ad8

  • SHA1

    87b37e045290af27874381a9069894f85fa7e3c4

  • SHA256

    19bb7a90a3b969c84c288364d3e9257a7bf37abc983586b29d06c2fcab11004b

  • SHA512

    a12b78566aafaa053378b2d0bad7117385fd3e6ece543fdf0467068ec9436de44bc2e93465fcc2529dc261bd70b300be344fa6cdbf41802e893ffde435682804

  • SSDEEP

    3072:kGqM8pAgqt5NoupfKbmbgePCrcKCGnpW2sW35P1JA1Zvu5D7Ao5X3c64Qh/a7E:RqBqtrpewCoKC0PJEc5XAMXs6

Score
10/10
amadeycollectionspywarestealertrojan

Malware Config

Targets

    • Target

      file

    • Size

      324KB

    • MD5

      b1a6c5c5fd35c6bcab924ddf3e5f5ad8

    • SHA1

      87b37e045290af27874381a9069894f85fa7e3c4

    • SHA256

      19bb7a90a3b969c84c288364d3e9257a7bf37abc983586b29d06c2fcab11004b

    • SHA512

      a12b78566aafaa053378b2d0bad7117385fd3e6ece543fdf0467068ec9436de44bc2e93465fcc2529dc261bd70b300be344fa6cdbf41802e893ffde435682804

    • SSDEEP

      3072:kGqM8pAgqt5NoupfKbmbgePCrcKCGnpW2sW35P1JA1Zvu5D7Ao5X3c64Qh/a7E:RqBqtrpewCoKC0PJEc5XAMXs6

    Score
    10/10
    amadeycollectionspywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Detect Amadey credential stealer module

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks