General

  • Target

    2692-97-0x0000000000D60000-0x000000000120A000-memory.dmp

  • Size

    4.7MB

  • Sample

    240710-exyzdayarg

  • MD5

    cec3e9de9939c0b85e55288f286c0e80

  • SHA1

    341cd1aa9ab9f517b67818cf1a209ed7a7578e39

  • SHA256

    3d3b35050195a60ffe1c8672031705dea428a60df2635d5abb5dd51c7cb1e5c5

  • SHA512

    afef72b8756eafeb0988db8b23cf9e5f2f69995920c9c005c4bcf0d7db068372e7906754719051f63adbd5b36c3abf36bf1c9f3aed5b29aec76b25aa45be5fa6

  • SSDEEP

    98304:CRI6ciLnlydlGqKPkiWbdwslwm3DWd7q5fny4zaR6yj+DfYX:C+Xwslb3DWA5a44L+DfY

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.30

Botnet

4dd39d

C2

http://77.91.77.82

Attributes
  • install_dir

    ad40971b6b

  • install_file

    explorti.exe

  • strings_key

    a434973ad22def7137dbb5e059b7081e

  • url_paths

    /Hun4Ko/index.php

rc4.plain

Targets

    • Target

      2692-97-0x0000000000D60000-0x000000000120A000-memory.dmp

    • Size

      4.7MB

    • MD5

      cec3e9de9939c0b85e55288f286c0e80

    • SHA1

      341cd1aa9ab9f517b67818cf1a209ed7a7578e39

    • SHA256

      3d3b35050195a60ffe1c8672031705dea428a60df2635d5abb5dd51c7cb1e5c5

    • SHA512

      afef72b8756eafeb0988db8b23cf9e5f2f69995920c9c005c4bcf0d7db068372e7906754719051f63adbd5b36c3abf36bf1c9f3aed5b29aec76b25aa45be5fa6

    • SSDEEP

      98304:CRI6ciLnlydlGqKPkiWbdwslwm3DWd7q5fny4zaR6yj+DfYX:C+Xwslb3DWA5a44L+DfY

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

MITRE ATT&CK Matrix

Tasks