amadey | 8dc82681e2818a696157276e0002e69d54db2221c5530ae363350efb62b0d546 | Triage

Sharing

General

Target

1752-3-0x0000000000400000-0x0000000000472000-memory.dmp
Size

456KB
Sample

240619-1akn5awhrp
MD5

8a95be83008671f207e6862d3b474938
SHA1

48085753e246cb66dcf09d2829b84e99ca0ae778
SHA256

8dc82681e2818a696157276e0002e69d54db2221c5530ae363350efb62b0d546
SHA512

2a044a662a32b5e16d1bc290528f5b26e20340904f164b50bded9cc400afe2d893881dda5f3e48ea599d4a7f6172d6bcef5147015b4574ec738bbd311a4ee420
SSDEEP

12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8NxnvRb7:5u8uBNnopx5Sg8vRb7

Score

10^/10

amadey 8fc809

Malware Config

Extracted

Family

amadey

Version

4.19

Botnet

8fc809

C2

http://nudump.com

http://otyt.ru

http://selltix.org

Attributes

install_dir
b739b37d80
install_file
Dctooux.exe
strings_key
65bac8d4c26069c29f1fd276f7af33f3
url_paths
/forum/index.php

/forum2/index.php

/forum3/index.php

rc4.plain

Targets

- Target
  
  1752-3-0x0000000000400000-0x0000000000472000-memory.dmp
- Size
  
  456KB
- MD5
  
  8a95be83008671f207e6862d3b474938
- SHA1
  
  48085753e246cb66dcf09d2829b84e99ca0ae778
- SHA256
  
  8dc82681e2818a696157276e0002e69d54db2221c5530ae363350efb62b0d546
- SHA512
  
  2a044a662a32b5e16d1bc290528f5b26e20340904f164b50bded9cc400afe2d893881dda5f3e48ea599d4a7f6172d6bcef5147015b4574ec738bbd311a4ee420
- SSDEEP
  
  12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8NxnvRb7:5u8uBNnopx5Sg8vRb7
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2