General

  • Target

    097c60ed39c99cdaeec126f6cf78fbbe6ca220e19b32111f2debc7d3c7d066a4

  • Size

    379KB

  • Sample

    221203-16pyqaeb21

  • MD5

    9eb9bc97eac2157b63e8c3f51820b40e

  • SHA1

    6a35c148704baa22906e5f6c92a3c2fab44da503

  • SHA256

    097c60ed39c99cdaeec126f6cf78fbbe6ca220e19b32111f2debc7d3c7d066a4

  • SHA512

    6a2ce1543cbf41f0f1dadefb14930d9eb9b3b759acdbb077266f0ce830f45384cd99dd381bc28afd9f82fdf6df43e78d113206937407c0e0709b25bf2ed7c0e4

  • SSDEEP

    6144:0OuInKL682pUcRiO7S5OUGZ5Re02uENvmYuRaLjK:0/eKEpUa+S5ReluE58RK

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.50

C2

77.73.134.66/o7Vsjd3a2f/index.php

Targets

    • Target

      097c60ed39c99cdaeec126f6cf78fbbe6ca220e19b32111f2debc7d3c7d066a4

    • Size

      379KB

    • MD5

      9eb9bc97eac2157b63e8c3f51820b40e

    • SHA1

      6a35c148704baa22906e5f6c92a3c2fab44da503

    • SHA256

      097c60ed39c99cdaeec126f6cf78fbbe6ca220e19b32111f2debc7d3c7d066a4

    • SHA512

      6a2ce1543cbf41f0f1dadefb14930d9eb9b3b759acdbb077266f0ce830f45384cd99dd381bc28afd9f82fdf6df43e78d113206937407c0e0709b25bf2ed7c0e4

    • SSDEEP

      6144:0OuInKL682pUcRiO7S5OUGZ5Re02uENvmYuRaLjK:0/eKEpUa+S5ReluE58RK

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks