Overview

overview

10

Static

static

10

3b82a0ea49...af.dll

windows7-x64

10

3b82a0ea49...af.dll

windows10-2004-x64

7

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af

  • Size

    67KB

  • Sample

    221114-zqs5rsdf22

  • MD5

    74b9c23837a2cbd78022b12a68b9dbf3

  • SHA1

    438f89286442229b67188bbb9f4c8c5f21bd2a13

  • SHA256

    9a1aa3a9f84252bfe4c9f79d056991b1374c9e9500995efd88ff70ddbfbfcb11

  • SHA512

    7c6126773ce74b383bc7bdd4aed4777af883128e934dd76c03d49c4ff453bb780dfee757873e599ba9d102d63325c32fc752521eac1e079093e7238a11872518

  • SSDEEP

    1536:TYjtmoic3woWKK6b6tBBoxkJcW48OcdIT+bFdjwsZrmBO0jnFDh8mZiw:l+A6Wtj0k6iIT+xOA6g8Nh8w

Score
10/10
amadeycollectionspywarestealertrojan

Malware Config

Targets

    • Target

      3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af

    • Size

      126KB

    • MD5

      507e9dc7b9c42f535b6df96d79179835

    • SHA1

      acf41fb549750023115f060071aa5ca8c33f249e

    • SHA256

      3b82a0ea49d855327b64073872ebb6b63eee056e182be6b1935aa512628252af

    • SHA512

      70907ec4c395b0d2219bfe98907ec130bfcbc6d4bec7bd73965a9b1e422553e27daaead3d6647620fcf5392d85a2e975bce0f7c79c0bc665dd33ce65f7d44302

    • SSDEEP

      3072:Yx7pOYzBekK3tiINwyP7XSSJds3zhrjPcnqULv4G9:Yx7ZNhK3vwyOztPc3L

    Score
    10/10
    amadeycollectionspywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Detect Amadey credential stealer module

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks