General

  • Target

    0x00060000000231d4-33.dat

  • Size

    321KB

  • Sample

    230827-e2gkwsfd34

  • MD5

    1f08176b7371ee36f649887c5b496a26

  • SHA1

    f7f100aad20fbe78628da3cd245322e30e841366

  • SHA256

    bb2ff7dab66e85260801209d108a512c39eafa7d2f4d067abb9e7347c81a2cc7

  • SHA512

    8e3ad11e5d9b16966c4e4193ec43e4c1e1b91a1a0a5627982921d0da4328571fd4bb51a75fab91a453a0f7035782cb38529ec16a98682dea0811d3c4418fbd66

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x00060000000231d4-33.dat

    • Size

      321KB

    • MD5

      1f08176b7371ee36f649887c5b496a26

    • SHA1

      f7f100aad20fbe78628da3cd245322e30e841366

    • SHA256

      bb2ff7dab66e85260801209d108a512c39eafa7d2f4d067abb9e7347c81a2cc7

    • SHA512

      8e3ad11e5d9b16966c4e4193ec43e4c1e1b91a1a0a5627982921d0da4328571fd4bb51a75fab91a453a0f7035782cb38529ec16a98682dea0811d3c4418fbd66

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks