amadey | b93a157d45e63f4d93ac0f5a966d3e3d0763acbc7f9680b5d34b2b7010b45ace | Triage

Sharing

General

Target

6052-271-0x0000000000E90000-0x0000000001291000-memory.dmp
Size

4.0MB
Sample

240526-gtf1hahd4t
MD5

45ef769ece55488d448ad58002d8f1d9
SHA1

7785bb388450b654ec6f91475a29e1e498cf84c0
SHA256

b93a157d45e63f4d93ac0f5a966d3e3d0763acbc7f9680b5d34b2b7010b45ace
SHA512

bc8a675d9eef64cea001c40a58e9840bcbf5902c1cb434ed0087568937f96b68427b4969af7b10532dc621386bff71924e6d9e414a48e35d6c8fabb20943bcd8
SSDEEP

98304:Gb7uxZ3HdxlIdO+oG60hgr1VsrNoRoit:Ga3aw+oG60hqVsko

Score

10^/10

amadey cbfcbf trojan

Malware Config

Extracted

Family

amadey

Version

4.15

Botnet

cbfcbf

C2

http://185.215.113.68

Attributes

install_dir
d887ceb89d
install_file
explorhe.exe
strings_key
7cadc181267fafff9df8503e730d60e1
url_paths
/theme/index.php

rc4.plain

Targets

- Target
  
  6052-271-0x0000000000E90000-0x0000000001291000-memory.dmp
- Size
  
  4.0MB
- MD5
  
  45ef769ece55488d448ad58002d8f1d9
- SHA1
  
  7785bb388450b654ec6f91475a29e1e498cf84c0
- SHA256
  
  b93a157d45e63f4d93ac0f5a966d3e3d0763acbc7f9680b5d34b2b7010b45ace
- SHA512
  
  bc8a675d9eef64cea001c40a58e9840bcbf5902c1cb434ed0087568937f96b68427b4969af7b10532dc621386bff71924e6d9e414a48e35d6c8fabb20943bcd8
- SSDEEP
  
  98304:Gb7uxZ3HdxlIdO+oG60hgr1VsrNoRoit:Ga3aw+oG60hqVsko
Score

10^/10

amadey trojan
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2