amadey | 9ee11db4f1a9bb5e28793d074ca89b04d37f3500d11ead6d034f9d8e057c0805 | Triage

Sharing

General

Target

1212-3-0x0000000000400000-0x0000000000472000-memory.dmp
Size

456KB
Sample

240620-1lk42asekl
MD5

140df8342eaec94d9a30796aa095df50
SHA1

a8c39e57bfc301f386e3a75ca747cda9b57eb93c
SHA256

9ee11db4f1a9bb5e28793d074ca89b04d37f3500d11ead6d034f9d8e057c0805
SHA512

27f9ed0ee3af9d6cd1a1638ed30088d9717196ba0e35bf85b785e0b82c704292adfadad4bfc32cc278e8c98f361caa3c3d3c5808c0e11ee1a41ad4334b635d96
SSDEEP

12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8NxevRv7:5u8uBNnopx5Sg8QRv7

Score

10^/10

amadey 8fc809

Malware Config

Extracted

Family

amadey

Version

4.19

Botnet

8fc809

C2

http://nudump.com

http://otyt.ru

http://selltix.org

Attributes

install_dir
b739b37d80
install_file
Dctooux.exe
strings_key
65bac8d4c26069c29f1fd276f7af33f3
url_paths
/forum/index.php

/forum2/index.php

/forum3/index.php

rc4.plain

Targets

- Target
  
  1212-3-0x0000000000400000-0x0000000000472000-memory.dmp
- Size
  
  456KB
- MD5
  
  140df8342eaec94d9a30796aa095df50
- SHA1
  
  a8c39e57bfc301f386e3a75ca747cda9b57eb93c
- SHA256
  
  9ee11db4f1a9bb5e28793d074ca89b04d37f3500d11ead6d034f9d8e057c0805
- SHA512
  
  27f9ed0ee3af9d6cd1a1638ed30088d9717196ba0e35bf85b785e0b82c704292adfadad4bfc32cc278e8c98f361caa3c3d3c5808c0e11ee1a41ad4334b635d96
- SSDEEP
  
  12288:58m7eJ8uBNne5pAeNaeLSPBWKuJ+Q8NxevRv7:5u8uBNnopx5Sg8QRv7
Score

1^/10
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2