General

  • Target

    1452-35-0x0000000000180000-0x000000000064B000-memory.dmp

  • Size

    4.8MB

  • Sample

    241126-bgk6ssspel

  • MD5

    1295aef87cd2f7b7290c2627746ebbe2

  • SHA1

    ccb9395ef627648b3a264b8eb22b0e22ad6e52ab

  • SHA256

    fdbbc08cc6af2a03afe6eee6d9647343610b9d79781dcef21708b0c7413b0f81

  • SHA512

    ceecdc73b5a50495014091a5e465fb01649717ad40f37b705065b2b91a15a8043d9ce462c87d58c84a8f361d7344ea783f63432fe9550ffabfb746b018467915

  • SSDEEP

    98304:26skjpxyIPhEU4dKmlAWbKre3aCyFEaM6wkWbnDuEqpTJ0/:2f/l3btdyAjkOVeTJU

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      1452-35-0x0000000000180000-0x000000000064B000-memory.dmp

    • Size

      4.8MB

    • MD5

      1295aef87cd2f7b7290c2627746ebbe2

    • SHA1

      ccb9395ef627648b3a264b8eb22b0e22ad6e52ab

    • SHA256

      fdbbc08cc6af2a03afe6eee6d9647343610b9d79781dcef21708b0c7413b0f81

    • SHA512

      ceecdc73b5a50495014091a5e465fb01649717ad40f37b705065b2b91a15a8043d9ce462c87d58c84a8f361d7344ea783f63432fe9550ffabfb746b018467915

    • SSDEEP

      98304:26skjpxyIPhEU4dKmlAWbKre3aCyFEaM6wkWbnDuEqpTJ0/:2f/l3btdyAjkOVeTJU

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks