General

  • Target

    adbaf286228c46522e50371c4be31a03.dll

  • Size

    126KB

  • Sample

    221126-jx9hbsdf82

  • MD5

    adbaf286228c46522e50371c4be31a03

  • SHA1

    a29d644c4663b2e2b2bd92046ba0df629537c297

  • SHA256

    d3e9a3365f73a34e2dd9022a318abcc2c55af98bafb2dc302cbb55f5398bb9a0

  • SHA512

    74a55cc8d8c3af54e5ba290a34b968918da994ea2d55b5f0d1f39e83cb9a39d73226227933c760b48f2e0bdb646f8243967517ef8202e02d88411d2d19ae217d

  • SSDEEP

    3072:ox7pOYzBekBmWDWCMq6As523HeS9FAiZ87vO2rlL3Rnm9:ox7ZNhB/dMq6AO0a7vVlT

Malware Config

Targets

    • Target

      adbaf286228c46522e50371c4be31a03.dll

    • Size

      126KB

    • MD5

      adbaf286228c46522e50371c4be31a03

    • SHA1

      a29d644c4663b2e2b2bd92046ba0df629537c297

    • SHA256

      d3e9a3365f73a34e2dd9022a318abcc2c55af98bafb2dc302cbb55f5398bb9a0

    • SHA512

      74a55cc8d8c3af54e5ba290a34b968918da994ea2d55b5f0d1f39e83cb9a39d73226227933c760b48f2e0bdb646f8243967517ef8202e02d88411d2d19ae217d

    • SSDEEP

      3072:ox7pOYzBekBmWDWCMq6As523HeS9FAiZ87vO2rlL3Rnm9:ox7ZNhB/dMq6AO0a7vVlT

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Detect Amadey credential stealer module

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

    • Accesses Microsoft Outlook profiles

MITRE ATT&CK Matrix ATT&CK v6

Credential Access

Credentials in Files

1
T1081

Collection

Data from Local System

1
T1005

Email Collection

1
T1114

Tasks