General

  • Target

    0x000600000001b004-150.dat

  • Size

    226KB

  • Sample

    230818-21panseh43

  • MD5

    c6270071dfcb3d167956b9ab583a8fac

  • SHA1

    a84dfacedfc66188e239415948cd669badf7001a

  • SHA256

    7a258db39fc1ad859df2dc060b5c37195680256e636fc64cd4751faaff91e2b2

  • SHA512

    ffbc1c09e9dbd7e325d26e254affeece3c181ea15aebe79265e2ac9fb8e2b78315fe7129e68fd10ede92112df9458b1a9bca5237454ea8cfcaf332cbec1309e4

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Targets

    • Target

      0x000600000001b004-150.dat

    • Size

      226KB

    • MD5

      c6270071dfcb3d167956b9ab583a8fac

    • SHA1

      a84dfacedfc66188e239415948cd669badf7001a

    • SHA256

      7a258db39fc1ad859df2dc060b5c37195680256e636fc64cd4751faaff91e2b2

    • SHA512

      ffbc1c09e9dbd7e325d26e254affeece3c181ea15aebe79265e2ac9fb8e2b78315fe7129e68fd10ede92112df9458b1a9bca5237454ea8cfcaf332cbec1309e4

    • SSDEEP

      3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks