amadey | e501e9fc4c78ee9e8a79b44d7be15b29bc4ed78b04f4a30a458645c1f7ade923 | Triage

Sharing

General

Target

3904-2-0x0000000000BB0000-0x0000000001075000-memory.dmp
Size

4.8MB
Sample

240329-jd367scd9x
MD5

1135e7f552f421e073de475ac141aad9
SHA1

e358f72913279890a50b8b771123924099cfb642
SHA256

e501e9fc4c78ee9e8a79b44d7be15b29bc4ed78b04f4a30a458645c1f7ade923
SHA512

8094707ce5cb7ff93ea26333afda303a13d757a630c46bf402006d89c66d381af3663c683a84b8254506bc1d4f3577ddf71acdc12746b54bd1ea9d742b1eb898
SSDEEP

98304:111tidAp5s6x6bbfnN+cBb3vM1e0SJ8CN3hEWLf:1c3nNLB7vM1abLE

Score

10^/10

amadey trojan

Malware Config

Extracted

Family

amadey

Version

4.17

C2

http://185.215.113.32

Attributes

install_dir
00c07260dc
install_file
explorgu.exe
strings_key
461809bd97c251ba0c0c8450c7055f1d
url_paths
/yandex/index.php

rc4.plain

Targets

- Target
  
  3904-2-0x0000000000BB0000-0x0000000001075000-memory.dmp
- Size
  
  4.8MB
- MD5
  
  1135e7f552f421e073de475ac141aad9
- SHA1
  
  e358f72913279890a50b8b771123924099cfb642
- SHA256
  
  e501e9fc4c78ee9e8a79b44d7be15b29bc4ed78b04f4a30a458645c1f7ade923
- SHA512
  
  8094707ce5cb7ff93ea26333afda303a13d757a630c46bf402006d89c66d381af3663c683a84b8254506bc1d4f3577ddf71acdc12746b54bd1ea9d742b1eb898
- SSDEEP
  
  98304:111tidAp5s6x6bbfnN+cBb3vM1e0SJ8CN3hEWLf:1c3nNLB7vM1abLE
Score

10^/10

amadey trojan
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2