General

  • Target

    0x0007000000018bba-34.dat

  • Size

    322KB

  • Sample

    230827-mjtrhaha35

  • MD5

    390f9d6624fa0e1907279dd8abfa6822

  • SHA1

    0b00a958b0f861707eedd39600d1c177ed5a2112

  • SHA256

    a5291740a87cea6446dc66f84942f5cd5b3a887209c8c51a0d8b3922aa2c5f46

  • SHA512

    a92df1080fefc709ca585ff02a9303b12154af9268ee15e66289dbce35635e553e67ecceb3d77a940450cb9759ac2151747aa46d34368a9c2507dfcb47dc7c49

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0007000000018bba-34.dat

    • Size

      322KB

    • MD5

      390f9d6624fa0e1907279dd8abfa6822

    • SHA1

      0b00a958b0f861707eedd39600d1c177ed5a2112

    • SHA256

      a5291740a87cea6446dc66f84942f5cd5b3a887209c8c51a0d8b3922aa2c5f46

    • SHA512

      a92df1080fefc709ca585ff02a9303b12154af9268ee15e66289dbce35635e553e67ecceb3d77a940450cb9759ac2151747aa46d34368a9c2507dfcb47dc7c49

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks