General

  • Target

    0x000600000001afd5-33.dat

  • Size

    321KB

  • Sample

    230827-efcptafc48

  • MD5

    797fda36f09d0a5635f55ec9713bf887

  • SHA1

    93f2d8316ba7794bc8dea40323ef49aceb2bcf7f

  • SHA256

    e6ab7aba0dc92a1275ae6397a07aaccdeef26df59562d2c178f025ed31d9a6d7

  • SHA512

    c5dd7da9e7be8b3a1a10f5a487bec5add2cb530e0815a2321325cd7e78b8a56e3dafdb6c6085593e599e9c9d2baf58881a548f581ecfb5d2b7913286744d07fd

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x000600000001afd5-33.dat

    • Size

      321KB

    • MD5

      797fda36f09d0a5635f55ec9713bf887

    • SHA1

      93f2d8316ba7794bc8dea40323ef49aceb2bcf7f

    • SHA256

      e6ab7aba0dc92a1275ae6397a07aaccdeef26df59562d2c178f025ed31d9a6d7

    • SHA512

      c5dd7da9e7be8b3a1a10f5a487bec5add2cb530e0815a2321325cd7e78b8a56e3dafdb6c6085593e599e9c9d2baf58881a548f581ecfb5d2b7913286744d07fd

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks