General

  • Target

    0x0006000000023002-34.dat

  • Size

    325KB

  • Sample

    230829-rbygyach43

  • MD5

    69fd4676a08cd7cf094761086a01c47e

  • SHA1

    324f5cf59d67f5b1fb46787944aacf4fb201f282

  • SHA256

    4c75e90e53acce6ed0f829b6539985e20a1b960bdcb2b6686adbacb01293f3f5

  • SHA512

    2992554d4a954a9db3f641b98eec405e1ed151ea5eaa2265355bae0291b74b434e815a4bbd9c6f724db4d4841eb2ac546cb13fc757045b48a4b2766d4b183387

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0006000000023002-34.dat

    • Size

      325KB

    • MD5

      69fd4676a08cd7cf094761086a01c47e

    • SHA1

      324f5cf59d67f5b1fb46787944aacf4fb201f282

    • SHA256

      4c75e90e53acce6ed0f829b6539985e20a1b960bdcb2b6686adbacb01293f3f5

    • SHA512

      2992554d4a954a9db3f641b98eec405e1ed151ea5eaa2265355bae0291b74b434e815a4bbd9c6f724db4d4841eb2ac546cb13fc757045b48a4b2766d4b183387

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks