General

  • Target

    2520-3-0x0000000000EE0000-0x0000000001371000-memory.dmp

  • Size

    4.6MB

  • Sample

    241119-tba3raxgpf

  • MD5

    3b0c7ce55a05c20e28e9d72ff2074cc4

  • SHA1

    9d8347dad1117e7f85225bf2634791ab516f1645

  • SHA256

    7ad50baa0113253492f93726bfa6250368569b3feb80049955cb324800301c72

  • SHA512

    d42718771ccdb0c184c871691ee4d44ac9cf9064196e81b3072e3690b3b12bca0e872a3672d17498cb9f0add39854b0eb6b4a53888ffa1a6de6fa2df0d88e5f9

  • SSDEEP

    98304:YRIAVQj31qCOQnsWGG3E3Blj3pAAdUE+WoOZd0pOtfxZXnf6MuHlS:YZPvAAdUE+kdSOZxZCT

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      2520-3-0x0000000000EE0000-0x0000000001371000-memory.dmp

    • Size

      4.6MB

    • MD5

      3b0c7ce55a05c20e28e9d72ff2074cc4

    • SHA1

      9d8347dad1117e7f85225bf2634791ab516f1645

    • SHA256

      7ad50baa0113253492f93726bfa6250368569b3feb80049955cb324800301c72

    • SHA512

      d42718771ccdb0c184c871691ee4d44ac9cf9064196e81b3072e3690b3b12bca0e872a3672d17498cb9f0add39854b0eb6b4a53888ffa1a6de6fa2df0d88e5f9

    • SSDEEP

      98304:YRIAVQj31qCOQnsWGG3E3Blj3pAAdUE+WoOZd0pOtfxZXnf6MuHlS:YZPvAAdUE+kdSOZxZCT

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks