amadey | 1784d1699fdbc9af71bc7b6f21e4185034b36274e91e0db719f49af156f3da71 | Triage

Sharing

General

Target

364e763703e900c58e74a1ed7d57c9b0_NeikiAnalytics.exe
Size

229KB
Sample

240525-3jv8bsee8w
MD5

364e763703e900c58e74a1ed7d57c9b0
SHA1

564421567311079b7134a10bb698f426f61ae31e
SHA256

1784d1699fdbc9af71bc7b6f21e4185034b36274e91e0db719f49af156f3da71
SHA512

d66379201fdf632f3954fa4de3d1854403218b96fbeb4a4ad883d741bf369927871ad30d4f0462112596755fd3230a70a0ced79ec54214e1e087361c3228c2cd
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShJJm2MV:rBKE6LguFSfJ6

Score

10^/10

amadey b50502

Malware Config

Extracted

Family

amadey

Version

3.70

Botnet

b50502

C2

http://77.91.124.207

Attributes

install_dir
595f021478
install_file
oneetx.exe
strings_key
6e3d32d239380a49b6f83128fe71ea01
url_paths
/plays/chapter/index.php

rc4.plain

Targets

- Target
  
  364e763703e900c58e74a1ed7d57c9b0_NeikiAnalytics.exe
- Size
  
  229KB
- MD5
  
  364e763703e900c58e74a1ed7d57c9b0
- SHA1
  
  564421567311079b7134a10bb698f426f61ae31e
- SHA256
  
  1784d1699fdbc9af71bc7b6f21e4185034b36274e91e0db719f49af156f3da71
- SHA512
  
  d66379201fdf632f3954fa4de3d1854403218b96fbeb4a4ad883d741bf369927871ad30d4f0462112596755fd3230a70a0ced79ec54214e1e087361c3228c2cd
- SSDEEP
  
  6144:7iVQQG75dpcElElt/DgK1yuFShJJm2MV:rBKE6LguFSfJ6
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2