General

  • Target

    0x00050000000193a1-76.dat

  • Size

    230KB

  • Sample

    230806-djz4vaff94

  • MD5

    00594d8f057a9210916315d9df5fa220

  • SHA1

    dee21c720e0362b2ba17c2fe631360a4654b0ed9

  • SHA256

    d98c51d1aa6ef3453e1ea14609fd643f5ee782db8d7cc0e4c298fb49fdd23516

  • SHA512

    f0949b3d3c42e78cb45332837fc8f025549e798f2f1a4ec3f884819f836733df0145697b09a3e7fa4ab6ee49f75966d24d45b95ce853bdfd343abb2d23729405

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Targets

    • Target

      0x00050000000193a1-76.dat

    • Size

      230KB

    • MD5

      00594d8f057a9210916315d9df5fa220

    • SHA1

      dee21c720e0362b2ba17c2fe631360a4654b0ed9

    • SHA256

      d98c51d1aa6ef3453e1ea14609fd643f5ee782db8d7cc0e4c298fb49fdd23516

    • SHA512

      f0949b3d3c42e78cb45332837fc8f025549e798f2f1a4ec3f884819f836733df0145697b09a3e7fa4ab6ee49f75966d24d45b95ce853bdfd343abb2d23729405

    • SSDEEP

      3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks