General

  • Target

    0x0007000000015542-34.dat

  • Size

    322KB

  • Sample

    230827-qwdgtshf73

  • MD5

    b3424296c7d4bbb7884a6f6754f87e78

  • SHA1

    2f6a1e3b6bd680b6a4653c81931954573c08d17a

  • SHA256

    840ae138c358d4bda662d32b3feeefb9485f8f40ebcf34f49255404ae0456598

  • SHA512

    072ecb6056590cd10f5c4dc611bc3d4394be807eaa070316e036bf3f6e0bc565708a17b0fd923b60175426ecdc652ade51df3a037b068858feb8041cee2f755a

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0007000000015542-34.dat

    • Size

      322KB

    • MD5

      b3424296c7d4bbb7884a6f6754f87e78

    • SHA1

      2f6a1e3b6bd680b6a4653c81931954573c08d17a

    • SHA256

      840ae138c358d4bda662d32b3feeefb9485f8f40ebcf34f49255404ae0456598

    • SHA512

      072ecb6056590cd10f5c4dc611bc3d4394be807eaa070316e036bf3f6e0bc565708a17b0fd923b60175426ecdc652ade51df3a037b068858feb8041cee2f755a

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks