Overview

overview

10

Static

static

1

0cdb644016...51.exe

windows7-x64

10

0cdb644016...51.exe

windows10-2004-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    0cdb6440166b0135f7cd4feff60a5351.exe
  • Size 6.3MB
  • Sample230710-llmwashf47
  • SHA256 36cf6ced1c9832ffb8bea522b7683ef40a540eb70a4202c0df752b758d31025b
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
amadeytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 3.85

C2

  • badurka5hippo73.top/9kdmSxq/index.php

  • gelofin12olion02.top/9kdmSxq/index.php

  • celogun39kolo43.top/9kdmSxq/index.php

Targets

    • Target
      0cdb6440166b0135f7cd4feff60a5351.exe
    • Size 6.3MB
    • SHA256 36cf6ced1c9832ffb8bea522b7683ef40a540eb70a4202c0df752b758d31025b
    • MD5 SHA1 SHA512 SSDEEP
    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Downloads MZ/PE file

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks