General

  • Target

    d970ab0e6139c0dc1fcd0fe0b6b97d67f3ae311676377c64836223a826858de6

  • Size

    940KB

  • Sample

    230611-ff33fahc6z

  • MD5

    a18bebbed0e0917c7bcd1161a1ef9166

  • SHA1

    6e3e9b944a1ce3d5557d75a1c06848f6886de637

  • SHA256

    d970ab0e6139c0dc1fcd0fe0b6b97d67f3ae311676377c64836223a826858de6

  • SHA512

    af6694a48d00852660b943e0cfdd18d041256db6a3ba13ea30bfcccaad144c13bc77cd51158f49aa4653fc6639f8b0caaac69b5719c9be0c43c796173711116a

  • SSDEEP

    24576:+bByb8Bx4tSVuUXG4fM+hGmqhvitP3o5R:+bM5O7U+hZqhvitP3o5R

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.83

C2

78.46.242.112/so57Nst/index.php

Targets

    • Target

      d970ab0e6139c0dc1fcd0fe0b6b97d67f3ae311676377c64836223a826858de6

    • Size

      940KB

    • MD5

      a18bebbed0e0917c7bcd1161a1ef9166

    • SHA1

      6e3e9b944a1ce3d5557d75a1c06848f6886de637

    • SHA256

      d970ab0e6139c0dc1fcd0fe0b6b97d67f3ae311676377c64836223a826858de6

    • SHA512

      af6694a48d00852660b943e0cfdd18d041256db6a3ba13ea30bfcccaad144c13bc77cd51158f49aa4653fc6639f8b0caaac69b5719c9be0c43c796173711116a

    • SSDEEP

      24576:+bByb8Bx4tSVuUXG4fM+hGmqhvitP3o5R:+bM5O7U+hZqhvitP3o5R

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks