General

  • Target

    0x0006000000018fd0-34.dat

  • Size

    321KB

  • Sample

    230827-lndemsgg72

  • MD5

    b135eda95a10ecf6a5b54b6883223a45

  • SHA1

    d997b16575b9375b59674bf75e3fc66dfc52182b

  • SHA256

    4c70bfe863178ec98a2287c086ef291d35dcf7a08b16f0d2144fddf73bf3f5c3

  • SHA512

    27100613b51ad444a393ceaf1d1c44306ed0c6ae6ec33d9bff9e2505ddf277bcb30ec5d28b501e95b9e21b11ac613a903f5d3e2bdae1abaf42b318bdd4aff32b

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0006000000018fd0-34.dat

    • Size

      321KB

    • MD5

      b135eda95a10ecf6a5b54b6883223a45

    • SHA1

      d997b16575b9375b59674bf75e3fc66dfc52182b

    • SHA256

      4c70bfe863178ec98a2287c086ef291d35dcf7a08b16f0d2144fddf73bf3f5c3

    • SHA512

      27100613b51ad444a393ceaf1d1c44306ed0c6ae6ec33d9bff9e2505ddf277bcb30ec5d28b501e95b9e21b11ac613a903f5d3e2bdae1abaf42b318bdd4aff32b

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks