General

  • Target

    3416-35-0x0000000000850000-0x0000000000D08000-memory.dmp

  • Size

    4.7MB

  • Sample

    241125-qalw3strgr

  • MD5

    90b23c37e80ee6b2daf05402593071b3

  • SHA1

    ed7b8ceffbe0c4305346bc1f8cc2358ed061cfdd

  • SHA256

    328277241f6893f04c4ed2318144224e5cbf21294edfcadcf9400912d84332a7

  • SHA512

    7ad68906b9974990a3dbff7c8e9708f365f970aa4c9dc9797b467cc81265c18b6faea44ee38177b11fd850f79a1e36f8fee63bd77255e6f801a03c8452b42a21

  • SSDEEP

    98304:eI48iuIuvX50kct3mfQhJVA5/+P+aMrhipNCTd:e2xsVA0WHrhied

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      3416-35-0x0000000000850000-0x0000000000D08000-memory.dmp

    • Size

      4.7MB

    • MD5

      90b23c37e80ee6b2daf05402593071b3

    • SHA1

      ed7b8ceffbe0c4305346bc1f8cc2358ed061cfdd

    • SHA256

      328277241f6893f04c4ed2318144224e5cbf21294edfcadcf9400912d84332a7

    • SHA512

      7ad68906b9974990a3dbff7c8e9708f365f970aa4c9dc9797b467cc81265c18b6faea44ee38177b11fd850f79a1e36f8fee63bd77255e6f801a03c8452b42a21

    • SSDEEP

      98304:eI48iuIuvX50kct3mfQhJVA5/+P+aMrhipNCTd:e2xsVA0WHrhied

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks