amadey | 3e81685650be02dc0d760145f830f6a03f74a2c0bf5bec03c69589b0049fd1c6 | Triage

Sharing

General

Target

552-3-0x0000000000400000-0x0000000000472000-memory.dmp
Size

456KB
Sample

240619-2lgbhsveqf
MD5

3ede7d40d84251a608b847df023b0413
SHA1

cb26edbfde3fccdaa6e5df270c6bf02fd5caed63
SHA256

3e81685650be02dc0d760145f830f6a03f74a2c0bf5bec03c69589b0049fd1c6
SHA512

6f41db3af9af3a91851949684278c4282b60e78410625f5cb858321a20b1dcea29f8e6116efe4887248105f158615ec284012a9825cbdd13df730a22bc734f43
SSDEEP

12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8Nx2vRy7:5u8uBNnopx5Sg8YRy7

Score

10^/10

amadey 8fc809

Malware Config

Extracted

Family

amadey

Version

4.19

Botnet

8fc809

C2

http://nudump.com

http://otyt.ru

http://selltix.org

Attributes

install_dir
b739b37d80
install_file
Dctooux.exe
strings_key
65bac8d4c26069c29f1fd276f7af33f3
url_paths
/forum/index.php

/forum2/index.php

/forum3/index.php

rc4.plain

Targets

- Target
  
  552-3-0x0000000000400000-0x0000000000472000-memory.dmp
- Size
  
  456KB
- MD5
  
  3ede7d40d84251a608b847df023b0413
- SHA1
  
  cb26edbfde3fccdaa6e5df270c6bf02fd5caed63
- SHA256
  
  3e81685650be02dc0d760145f830f6a03f74a2c0bf5bec03c69589b0049fd1c6
- SHA512
  
  6f41db3af9af3a91851949684278c4282b60e78410625f5cb858321a20b1dcea29f8e6116efe4887248105f158615ec284012a9825cbdd13df730a22bc734f43
- SSDEEP
  
  12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8Nx2vRy7:5u8uBNnopx5Sg8YRy7
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2