amadey | c389abb9e090de9b77ebd3f42fde8b85063a6119986cf6f77853661abe85cd96 | Triage

Sharing

General

Target

c389abb9e090de9b77ebd3f42fde8b85063a6119986cf6f77853661abe85cd96
Size

204KB
Sample

241118-fefkraydqb
MD5

b1c5357be8e9e982c724a8f3a27f744f
SHA1

cbd0285fa660aa7710c7c1c609904b66a51c0c40
SHA256

c389abb9e090de9b77ebd3f42fde8b85063a6119986cf6f77853661abe85cd96
SHA512

224978ba562c61a8c081f71daed4072f8bb9ec1eff7b28ff43d4a4991a1186e408c94f08e46a8fd4fa69f8ed7623811993bd7ab5c8eaa83b1c224e942bbf2069
SSDEEP

3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+6kPbi83eILfYf5kmh:5Cswq+AXYu7HGOSuZAlrILAf

Score

10^/10

amadey f9a925 discovery

Malware Config

Extracted

Family

amadey

Version

3.81

Botnet

f9a925

C2

http://77.91.124.20

Attributes

install_dir
c3912af058
install_file
oneetx.exe
strings_key
0504ce46646b0dc397a3c30d6692ec75
url_paths
/store/games/index.php

rc4.plain

Targets

- Target
  
  c389abb9e090de9b77ebd3f42fde8b85063a6119986cf6f77853661abe85cd96
- Size
  
  204KB
- MD5
  
  b1c5357be8e9e982c724a8f3a27f744f
- SHA1
  
  cbd0285fa660aa7710c7c1c609904b66a51c0c40
- SHA256
  
  c389abb9e090de9b77ebd3f42fde8b85063a6119986cf6f77853661abe85cd96
- SHA512
  
  224978ba562c61a8c081f71daed4072f8bb9ec1eff7b28ff43d4a4991a1186e408c94f08e46a8fd4fa69f8ed7623811993bd7ab5c8eaa83b1c224e942bbf2069
- SSDEEP
  
  3072:mhMCsw9/w+A4cwP+5OzutpHKGruONM4QuZA+6kPbi83eILfYf5kmh:5Cswq+AXYu7HGOSuZAlrILAf
Score

3^/10

discovery
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

System Language Discovery

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

static1

behavioral1

behavioral2