amadey | 00d820a2f0dc2d1be13663b1e005f751d6a481812df5f7013b34fe9279215704 | Triage

Sharing

General

Target

060f4a5a545f6866734fb42829ea6cb0_NeikiAnalytics.exe
Size

229KB
Sample

240525-wy97gadc6y
MD5

060f4a5a545f6866734fb42829ea6cb0
SHA1

5580b3a9cc4adffb8a5d20eb1e7102cad343ff04
SHA256

00d820a2f0dc2d1be13663b1e005f751d6a481812df5f7013b34fe9279215704
SHA512

6c49e6ab8d48317546b676c85cada54e164bc4b61bf07112039799f674efdb82a5ac9917bf9c4060530e645ebf837c1078008222d5edf1722af1cc559ff00a12
SSDEEP

6144:7iVQQG75dpcElElt/DgK1yuFShOJm29w:rBKE6LguFS4Jg

Score

10^/10

amadey b50502

Malware Config

Extracted

Family

amadey

Version

3.70

Botnet

b50502

C2

http://77.91.124.207

Attributes

install_dir
595f021478
install_file
oneetx.exe
strings_key
6e3d32d239380a49b6f83128fe71ea01
url_paths
/plays/chapter/index.php

rc4.plain

Targets

- Target
  
  060f4a5a545f6866734fb42829ea6cb0_NeikiAnalytics.exe
- Size
  
  229KB
- MD5
  
  060f4a5a545f6866734fb42829ea6cb0
- SHA1
  
  5580b3a9cc4adffb8a5d20eb1e7102cad343ff04
- SHA256
  
  00d820a2f0dc2d1be13663b1e005f751d6a481812df5f7013b34fe9279215704
- SHA512
  
  6c49e6ab8d48317546b676c85cada54e164bc4b61bf07112039799f674efdb82a5ac9917bf9c4060530e645ebf837c1078008222d5edf1722af1cc559ff00a12
- SSDEEP
  
  6144:7iVQQG75dpcElElt/DgK1yuFShOJm29w:rBKE6LguFS4Jg
Score

3^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2