General

  • Target

    0x0007000000015cb3-34.dat

  • Size

    325KB

  • Sample

    230829-xzktmsab9t

  • MD5

    bfa836d65f048633b5ef820e342fdeb2

  • SHA1

    958362033cb7c1a01bccd16a4ae3cc9922e6e110

  • SHA256

    9fc979774b89cb53f091c6e39d56a3f8fb0ecaae260be2b2cb61089409666539

  • SHA512

    2daf8d7a519d97f43fc570a041cabd3c83d2fe45926d7c7b1930da9d75f142bb4eef6b6004f414485833461823f0d71b16005458028ff7ff89f08f87f480f6a5

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0007000000015cb3-34.dat

    • Size

      325KB

    • MD5

      bfa836d65f048633b5ef820e342fdeb2

    • SHA1

      958362033cb7c1a01bccd16a4ae3cc9922e6e110

    • SHA256

      9fc979774b89cb53f091c6e39d56a3f8fb0ecaae260be2b2cb61089409666539

    • SHA512

      2daf8d7a519d97f43fc570a041cabd3c83d2fe45926d7c7b1930da9d75f142bb4eef6b6004f414485833461823f0d71b16005458028ff7ff89f08f87f480f6a5

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks