General

  • Target

    0x0006000000015c97-42.dat

  • Size

    321KB

  • Sample

    230827-lxkkbaag6x

  • MD5

    5b54e5af3dfd1bd7a5ec1378d49364b4

  • SHA1

    9aeb334a17a329b0292d4a48d2203d2da10204c9

  • SHA256

    ecaba4af65aee060ddda078b18ac15c61a0f4749f976a333ec64aec061069487

  • SHA512

    a75ba667b0f095bbb0a2a45c83ad519262a28f393f78c5ab876993e016bc5192902adc092ee7642d7573cef21971947fe6ae57da2ab1d3c73024ae2c7629902e

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0006000000015c97-42.dat

    • Size

      321KB

    • MD5

      5b54e5af3dfd1bd7a5ec1378d49364b4

    • SHA1

      9aeb334a17a329b0292d4a48d2203d2da10204c9

    • SHA256

      ecaba4af65aee060ddda078b18ac15c61a0f4749f976a333ec64aec061069487

    • SHA512

      a75ba667b0f095bbb0a2a45c83ad519262a28f393f78c5ab876993e016bc5192902adc092ee7642d7573cef21971947fe6ae57da2ab1d3c73024ae2c7629902e

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks