Overview

overview

10

Static

static

10

d744db3a88...a9.exe

windows7-x64

3

d744db3a88...a9.exe

windows10-2004-x64

3

Sharing

Copy URL
Twitter E-mail

General

  • Target

    d744db3a88176f31cb7ded4a84ecddd59d2e071019c80d4e338f1ab4f24d73a9

  • Size

    204KB

  • Sample

    241118-gb3rjsvldk

  • MD5

    c3b1f7956581d9978a922659ee399bb5

  • SHA1

    6a49897dc40aaa2ec52c76ca984ca28351710b12

  • SHA256

    d744db3a88176f31cb7ded4a84ecddd59d2e071019c80d4e338f1ab4f24d73a9

  • SHA512

    4e6a46108078b9a22feb7d2f7d35d02d505401fb0f47a324d082f284e7e6b593eadf3e7a6a80238c77ef8d92299e8880aea3b72dd080c379c728b80d7a752f30

  • SSDEEP

    3072:5/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXJqeJX2v8eE2ftdPwU:dfrnzurs3Czpexj2kGOIu5QTBgE2lG

Score
10/10
amadey8c4642discovery

Malware Config

Extracted

Family

amadey

Version

3.80

Botnet

8c4642

C2

http://193.201.9.240

Attributes
  • install_dir

    cb7ae701b3

  • install_file

    oneetx.exe

  • strings_key

    c7c0f24aa6d8f611f5533809029a4795

  • url_paths

    /live/games/index.php

rc4.plain

Targets

    • Target

      d744db3a88176f31cb7ded4a84ecddd59d2e071019c80d4e338f1ab4f24d73a9

    • Size

      204KB

    • MD5

      c3b1f7956581d9978a922659ee399bb5

    • SHA1

      6a49897dc40aaa2ec52c76ca984ca28351710b12

    • SHA256

      d744db3a88176f31cb7ded4a84ecddd59d2e071019c80d4e338f1ab4f24d73a9

    • SHA512

      4e6a46108078b9a22feb7d2f7d35d02d505401fb0f47a324d082f284e7e6b593eadf3e7a6a80238c77ef8d92299e8880aea3b72dd080c379c728b80d7a752f30

    • SSDEEP

      3072:5/frTDzurT1S3CzpdmnATE55zjExkKGruONMvhu5QTXJqeJX2v8eE2ftdPwU:dfrnzurs3Czpexj2kGOIu5QTBgE2lG

    Score
    3/10
    discovery
    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks