amadey | 416db133077a79b92002764347e9ffda58df43b70029cbb16b19db1e3c3e675e | Triage

Sharing

General

Target

416db133077a79b92002764347e9ffda58df43b70029cbb16b19db1e3c3e675e
Size

229KB
Sample

240523-zjt4gsff9t
MD5

5437e74ad430a54deccf81b96e88aacb
SHA1

9e88caeeb140b5e649cb061c3d908c0bd1cfc7a7
SHA256

416db133077a79b92002764347e9ffda58df43b70029cbb16b19db1e3c3e675e
SHA512

6dad281042ecfc41b7102c10c9bde99e35e861685480f5638e81b0eed2cece57158f5fe4db0a9464fbd50a447fddd55253f59ea09d930c730f4b424a17f90524
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShaJm2bx:rBKE6LguFSsJb

Score

10^/10

amadey b50502

Malware Config

Extracted

Family

amadey

Version

3.70

Botnet

b50502

C2

http://77.91.124.207

Attributes

install_dir
595f021478
install_file
oneetx.exe
strings_key
6e3d32d239380a49b6f83128fe71ea01
url_paths
/plays/chapter/index.php

rc4.plain

Targets

- Target
  
  416db133077a79b92002764347e9ffda58df43b70029cbb16b19db1e3c3e675e
- Size
  
  229KB
- MD5
  
  5437e74ad430a54deccf81b96e88aacb
- SHA1
  
  9e88caeeb140b5e649cb061c3d908c0bd1cfc7a7
- SHA256
  
  416db133077a79b92002764347e9ffda58df43b70029cbb16b19db1e3c3e675e
- SHA512
  
  6dad281042ecfc41b7102c10c9bde99e35e861685480f5638e81b0eed2cece57158f5fe4db0a9464fbd50a447fddd55253f59ea09d930c730f4b424a17f90524
- SSDEEP
  
  6144:7iVQQG75dpcElElt/DgK1yuFShaJm2bx:rBKE6LguFSsJb
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2