General

  • Target

    0x0005000000018fb5-96.dat

  • Size

    227KB

  • Sample

    230801-aec7qsdb2s

  • MD5

    987d91f989839f79a8f6fa003a43ca18

  • SHA1

    e58429b4acf6d7dfef96ed598d75109ead1ff8d7

  • SHA256

    2d13ca0b05136b40a532df22fff4f06de871b8635b7f49cdadf2c65288ebd9c9

  • SHA512

    aeddcb9fb38cb01a9453db60f2e9862aa7d3394f318e0dcfc60ba86ec530baa47b8473dff85766072c7878d9751257c07efa94a28726af677fa6f5253ee42a49

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Targets

    • Target

      0x0005000000018fb5-96.dat

    • Size

      227KB

    • MD5

      987d91f989839f79a8f6fa003a43ca18

    • SHA1

      e58429b4acf6d7dfef96ed598d75109ead1ff8d7

    • SHA256

      2d13ca0b05136b40a532df22fff4f06de871b8635b7f49cdadf2c65288ebd9c9

    • SHA512

      aeddcb9fb38cb01a9453db60f2e9862aa7d3394f318e0dcfc60ba86ec530baa47b8473dff85766072c7878d9751257c07efa94a28726af677fa6f5253ee42a49

    • SSDEEP

      3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks