General

  • Target

    3044-3-0x0000000000820000-0x0000000000CE4000-memory.dmp

  • Size

    4.8MB

  • Sample

    241119-pf6m1a1jhl

  • MD5

    ff056e3c79494443360e1252848781a6

  • SHA1

    efa16123a9ed41fb83b16360a04742f6d54118d7

  • SHA256

    5df1f844cd7226382a219fa18ae88efb211c9a5660759f8a2069585a5ad90cc8

  • SHA512

    e6e1c5be9339cf53557f7992ac154169580ce7b41d2ccadcdb2690595965c56c180f35dfc8fd486e41b133915c62047d73df6027a139ab94c19d26ec577eae8f

  • SSDEEP

    98304:xVD2BVX1LEaHqgDWq3JS1hatve46LyXE3JO/MK:xWYq3Jih+ve46LbJr

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      3044-3-0x0000000000820000-0x0000000000CE4000-memory.dmp

    • Size

      4.8MB

    • MD5

      ff056e3c79494443360e1252848781a6

    • SHA1

      efa16123a9ed41fb83b16360a04742f6d54118d7

    • SHA256

      5df1f844cd7226382a219fa18ae88efb211c9a5660759f8a2069585a5ad90cc8

    • SHA512

      e6e1c5be9339cf53557f7992ac154169580ce7b41d2ccadcdb2690595965c56c180f35dfc8fd486e41b133915c62047d73df6027a139ab94c19d26ec577eae8f

    • SSDEEP

      98304:xVD2BVX1LEaHqgDWq3JS1hatve46LyXE3JO/MK:xWYq3Jih+ve46LbJr

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks