General

  • Target

    0x0005000000018d34-86.dat

  • Size

    225KB

  • Sample

    230801-mr6q2afc47

  • MD5

    54df3cfd064467dbe8b02e245bc36d4a

  • SHA1

    2c494b817dc862a6d463d2e9e72b82735103241f

  • SHA256

    cf3182c776e491b67d0fc5b356274285ecfec1835b91d3f039a42a722a35bd6f

  • SHA512

    857a8da0da7611cf558751d4f3e9e619d176aad2901dd0f66e17d7333defbdcca05fef470b23d0bfca33b3c55986c8f08d15a96e71b4dca9c60d3401f58162c1

  • SSDEEP

    3072:svtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbAa:StV3euVz6rKyS3yHFHhuNcPKpwIK+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

5.42.92.67/norm/index.php

Targets

    • Target

      0x0005000000018d34-86.dat

    • Size

      225KB

    • MD5

      54df3cfd064467dbe8b02e245bc36d4a

    • SHA1

      2c494b817dc862a6d463d2e9e72b82735103241f

    • SHA256

      cf3182c776e491b67d0fc5b356274285ecfec1835b91d3f039a42a722a35bd6f

    • SHA512

      857a8da0da7611cf558751d4f3e9e619d176aad2901dd0f66e17d7333defbdcca05fef470b23d0bfca33b3c55986c8f08d15a96e71b4dca9c60d3401f58162c1

    • SSDEEP

      3072:svtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbAa:StV3euVz6rKyS3yHFHhuNcPKpwIK+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks