General

  • Target

    5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

  • Size

    205KB

  • Sample

    230616-c3fnwacc8t

  • MD5

    246e24f071c41d09a98f3e5e5cede0b4

  • SHA1

    08e4716a6f246147ceb57008c130dca70c29edb3

  • SHA256

    5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

  • SHA512

    1359202c68e1e4b80528d9102f32ae4c8766bdd2f9b0b5cf814d1d76c485b1facb51542ebdfb48c0fdaab3003affb0427d67249a3492426d68f76433da546162

  • SSDEEP

    3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.84

C2

77.91.68.63/doma/net/index.php

Targets

    • Target

      5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

    • Size

      205KB

    • MD5

      246e24f071c41d09a98f3e5e5cede0b4

    • SHA1

      08e4716a6f246147ceb57008c130dca70c29edb3

    • SHA256

      5bddaa4912e3e52480eba1e640be3058a329a5915702dce922dcdac065bef9f7

    • SHA512

      1359202c68e1e4b80528d9102f32ae4c8766bdd2f9b0b5cf814d1d76c485b1facb51542ebdfb48c0fdaab3003affb0427d67249a3492426d68f76433da546162

    • SSDEEP

      3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v6

Tasks