General

  • Target

    0x0006000000016d4a-97.dat

  • Size

    232KB

  • Sample

    230804-2qfksaef88

  • MD5

    15440a8b2fb02e9c3b9735bc7f989bc6

  • SHA1

    ce1f9f12d5ecce9d604c97a8111d5c8cf3f17dc7

  • SHA256

    25a60b5e5465ba8365ebf46e6cbf5d319222daadedaf237da69fcbb6302584b0

  • SHA512

    4bc26be8af90680463d6cdcbf59b053147388fe250984f5e027b36fa81e1ac41dbf8b51c855db892bec1f5a14ed5deaff989952bd0c66b7ed2e1a9d213e0f14e

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Targets

    • Target

      0x0006000000016d4a-97.dat

    • Size

      232KB

    • MD5

      15440a8b2fb02e9c3b9735bc7f989bc6

    • SHA1

      ce1f9f12d5ecce9d604c97a8111d5c8cf3f17dc7

    • SHA256

      25a60b5e5465ba8365ebf46e6cbf5d319222daadedaf237da69fcbb6302584b0

    • SHA512

      4bc26be8af90680463d6cdcbf59b053147388fe250984f5e027b36fa81e1ac41dbf8b51c855db892bec1f5a14ed5deaff989952bd0c66b7ed2e1a9d213e0f14e

    • SSDEEP

      3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks