General

  • Target

    0x000600000001afee-33.dat

  • Size

    322KB

  • Sample

    230827-l969vagh93

  • MD5

    c1cef4716b88caf6cadbad532b21a7ee

  • SHA1

    376731ca412eb672bb0a34a79a2279fe3f6a26d2

  • SHA256

    ef0b46abebf89a86f1add22d1f599c1ce6ed6341afeb1660ea28abde597f4b58

  • SHA512

    ebda7b92662ae9ec2d2b8e8747e0a0bc63daa435bd4573000848893657f10b75598fb2dcdb07f184584d4835d85b2b68868dc941953ec0571836122d632cb518

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x000600000001afee-33.dat

    • Size

      322KB

    • MD5

      c1cef4716b88caf6cadbad532b21a7ee

    • SHA1

      376731ca412eb672bb0a34a79a2279fe3f6a26d2

    • SHA256

      ef0b46abebf89a86f1add22d1f599c1ce6ed6341afeb1660ea28abde597f4b58

    • SHA512

      ebda7b92662ae9ec2d2b8e8747e0a0bc63daa435bd4573000848893657f10b75598fb2dcdb07f184584d4835d85b2b68868dc941953ec0571836122d632cb518

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks