amadey | 6f19e486ba7197dc2c93ff075c678c3b6c3956960a291ad8b0f1c5ad49833fc8 | Triage

Sharing

General

Target

47d61945e1bbb704c435fb5fdead8da0_NeikiAnalytics.exe
Size

204KB
Sample

240525-gjxkhagd7w
MD5

47d61945e1bbb704c435fb5fdead8da0
SHA1

9e285f016bdd013b75418ee4e3aff2cbd484978a
SHA256

6f19e486ba7197dc2c93ff075c678c3b6c3956960a291ad8b0f1c5ad49833fc8
SHA512

abb51b95e400fca0c1768aaef1c61169e913722b423e911a85145a2156a41e0fc2734ad0d0ef2bd5e5baee8f2c895019e491b5726dda4daf710698df02ed9876
SSDEEP

3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXJqeJX2vkMf+6PwU:Wfrnzurs3Czpexj2kGOIu5QTBJMmr

Score

10^/10

amadey 9c0adb

Malware Config

Extracted

Family

amadey

Version

3.80

Botnet

9c0adb

C2

http://193.3.19.154

Attributes

install_dir
cb7ae701b3
install_file
oneetx.exe
strings_key
23b27c80db2465a8e1dc15491b69b82f
url_paths
/store/games/index.php

rc4.plain

Targets

- Target
  
  47d61945e1bbb704c435fb5fdead8da0_NeikiAnalytics.exe
- Size
  
  204KB
- MD5
  
  47d61945e1bbb704c435fb5fdead8da0
- SHA1
  
  9e285f016bdd013b75418ee4e3aff2cbd484978a
- SHA256
  
  6f19e486ba7197dc2c93ff075c678c3b6c3956960a291ad8b0f1c5ad49833fc8
- SHA512
  
  abb51b95e400fca0c1768aaef1c61169e913722b423e911a85145a2156a41e0fc2734ad0d0ef2bd5e5baee8f2c895019e491b5726dda4daf710698df02ed9876
- SSDEEP
  
  3072:c/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXJqeJX2vkMf+6PwU:Wfrnzurs3Czpexj2kGOIu5QTBJMmr
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2