amadey | b51ee0ceb5ce6de9290d47446bd0e069aca95736ee1fe5862f1f4f30e4f9eb40 | Triage

Sharing

General

Target

b51ee0ceb5ce6de9290d47446bd0e069aca95736ee1fe5862f1f4f30e4f9eb40
Size

244KB
Sample

221123-mkph6sec66
MD5

6e9a721ebfc8ccbc00f4f9dab847efdd
SHA1

080c8eaad49f87ef077b73f7fadca3b4e77d4711
SHA256

b51ee0ceb5ce6de9290d47446bd0e069aca95736ee1fe5862f1f4f30e4f9eb40
SHA512

da3c7c33819838172fd37871404ebebec488f5fbc09dbc9dbadc4355a41b58399b4ee5f3c522cab04aad21f67c43b090f14b26de7319a8755d74362724b4a878
SSDEEP

3072:cqlhj6lSNL1YDd1WmCO5z9mpqk2LrIOsMAW6JKX+50gSy61/d56sB2sD871hW2/v:TlkGLuDd1FnmMka16agq356mBDGhW6

Score

10^/10

amadey trojan

Malware Config

Extracted

Family

amadey

Version

3.50

C2

193.56.146.174/g84kvj4jck/index.php

Targets

- Target
  
  b51ee0ceb5ce6de9290d47446bd0e069aca95736ee1fe5862f1f4f30e4f9eb40
- Size
  
  244KB
- MD5
  
  6e9a721ebfc8ccbc00f4f9dab847efdd
- SHA1
  
  080c8eaad49f87ef077b73f7fadca3b4e77d4711
- SHA256
  
  b51ee0ceb5ce6de9290d47446bd0e069aca95736ee1fe5862f1f4f30e4f9eb40
- SHA512
  
  da3c7c33819838172fd37871404ebebec488f5fbc09dbc9dbadc4355a41b58399b4ee5f3c522cab04aad21f67c43b090f14b26de7319a8755d74362724b4a878
- SSDEEP
  
  3072:cqlhj6lSNL1YDd1WmCO5z9mpqk2LrIOsMAW6JKX+50gSy61/d56sB2sD871hW2/v:TlkGLuDd1FnmMka16agq356mBDGhW6
Score

10^/10

amadey trojan
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
- Executes dropped EXE
behavioral1

MITRE ATT&CK Matrix ATT&CK v6

Initial Access

Execution

Scheduled Task

Persistence

Scheduled Task

Privilege Escalation

Scheduled Task

Defense Evasion

Credential Access

Discovery

System Information Discovery

Lateral Movement

Collection

Exfiltration

Command and Control

Impact

Tasks

static1

behavioral1