amadey | 7d5ed9c4c5b6fb12b97b002865b032050ec7627d3f8a9ccfd23be199e9e5b8e9 | Triage

Sharing

General

Target

3feea327acd072e44ddd3debe8f59e60_NeikiAnalytics.exe
Size

229KB
Sample

240525-sb456agd6v
MD5

3feea327acd072e44ddd3debe8f59e60
SHA1

ac1de3b471a940241ce1ec89e5b6f953b18d161b
SHA256

7d5ed9c4c5b6fb12b97b002865b032050ec7627d3f8a9ccfd23be199e9e5b8e9
SHA512

aa0dafcd11c76efb4f08d100b9cbe6e5d3920540c8198de41caac51fabe05d0df8d0566fdb8b816e82f76c105894d424f641fa2a406983ae6162e92fc7c47ca7
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShDJm280:rBKE6LguFSlJD

Score

10^/10

amadey b50502

Malware Config

Extracted

Family

amadey

Version

3.70

Botnet

b50502

C2

http://77.91.124.207

Attributes

install_dir
595f021478
install_file
oneetx.exe
strings_key
6e3d32d239380a49b6f83128fe71ea01
url_paths
/plays/chapter/index.php

rc4.plain

Targets

- Target
  
  3feea327acd072e44ddd3debe8f59e60_NeikiAnalytics.exe
- Size
  
  229KB
- MD5
  
  3feea327acd072e44ddd3debe8f59e60
- SHA1
  
  ac1de3b471a940241ce1ec89e5b6f953b18d161b
- SHA256
  
  7d5ed9c4c5b6fb12b97b002865b032050ec7627d3f8a9ccfd23be199e9e5b8e9
- SHA512
  
  aa0dafcd11c76efb4f08d100b9cbe6e5d3920540c8198de41caac51fabe05d0df8d0566fdb8b816e82f76c105894d424f641fa2a406983ae6162e92fc7c47ca7
- SSDEEP
  
  6144:7iVQQG75dpcElElt/DgK1yuFShDJm280:rBKE6LguFSlJD
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2