Overview

overview

10

Static

static

10

1b048e4bd4...cs.exe

windows7-x64

3

1b048e4bd4...cs.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1b048e4bd40e9cda271e70df17477760_NeikiAnalytics.exe

  • Size

    229KB

  • Sample

    240525-y7nqyahb9z

  • MD5

    1b048e4bd40e9cda271e70df17477760

  • SHA1

    aff2a57f6101207e75605b8529c4d2dee506f585

  • SHA256

    b6dbfc3569c63ef4f1f00a0fe8c5add72ab29b0322584d07d9f9edb8c3d365ca

  • SHA512

    cabbe79cf64db30b1e764cdec59ecb1a14baa811fdf843d052b402112cf0bbf6df9f9ff89c10ac90b59b7c9cfb0201aea41d355b45e0038f3c8c5bbc39a60d7c

  • SSDEEP

    6144:7iVQQG75dpcElElt/DgK1yuFShHJm260:rBKE6LguFSpJh

Score
10/10
amadeyb50502

Malware Config

Extracted

Family

amadey

Version

3.70

Botnet

b50502

C2

http://77.91.124.207

Attributes
  • install_dir

    595f021478

  • install_file

    oneetx.exe

  • strings_key

    6e3d32d239380a49b6f83128fe71ea01

  • url_paths

    /plays/chapter/index.php

rc4.plain

Targets

    • Target

      1b048e4bd40e9cda271e70df17477760_NeikiAnalytics.exe

    • Size

      229KB

    • MD5

      1b048e4bd40e9cda271e70df17477760

    • SHA1

      aff2a57f6101207e75605b8529c4d2dee506f585

    • SHA256

      b6dbfc3569c63ef4f1f00a0fe8c5add72ab29b0322584d07d9f9edb8c3d365ca

    • SHA512

      cabbe79cf64db30b1e764cdec59ecb1a14baa811fdf843d052b402112cf0bbf6df9f9ff89c10ac90b59b7c9cfb0201aea41d355b45e0038f3c8c5bbc39a60d7c

    • SSDEEP

      6144:7iVQQG75dpcElElt/DgK1yuFShHJm260:rBKE6LguFSpJh

    Score
    3/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks