General

  • Target

    507e9dc7b9c42f535b6df96d79179835.dll

  • Size

    126KB

  • Sample

    221114-pzl3pshf56

  • MD5

    507e9dc7b9c42f535b6df96d79179835

  • SHA1

    acf41fb549750023115f060071aa5ca8c33f249e

  • SHA256

    3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af

  • SHA512

    70907ec4c395b0d2219bfe98907ec130bfcbc6d4bec7bd73965a9b1e422553e27daaead3d6647620fcf5392d85a2e975bce0f7c79c0bc665dd33ce65f7d44302

  • SSDEEP

    3072:Yx7pOYzBekK3tiINwyP7XSSJds3zhrjPcnqULv4G9:Yx7ZNhK3vwyOztPc3L

Malware Config

Targets

    • Target

      507e9dc7b9c42f535b6df96d79179835.dll

    • Size

      126KB

    • MD5

      507e9dc7b9c42f535b6df96d79179835

    • SHA1

      acf41fb549750023115f060071aa5ca8c33f249e

    • SHA256

      3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af

    • SHA512

      70907ec4c395b0d2219bfe98907ec130bfcbc6d4bec7bd73965a9b1e422553e27daaead3d6647620fcf5392d85a2e975bce0f7c79c0bc665dd33ce65f7d44302

    • SSDEEP

      3072:Yx7pOYzBekK3tiINwyP7XSSJds3zhrjPcnqULv4G9:Yx7ZNhK3vwyOztPc3L

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Detect Amadey credential stealer module

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Enterprise v6

Tasks