General

  • Target

    1928-3-0x0000000000260000-0x000000000070E000-memory.dmp

  • Size

    4.7MB

  • Sample

    241127-bc36taymav

  • MD5

    ce18b3885eb836880054b84d86172793

  • SHA1

    c05cf85f3c4a89b26f35df8c23a67c99f4e4eaba

  • SHA256

    947cc79a92b4bbd2b6b3fb444e99ed9c84edcb4513a71c5e1ab1de1cba6368ab

  • SHA512

    7e27f9ad4bf13f06cab5a4b75022dd7b94b4447bf4dca083b6f8907a76a1ef2611e1063d65199d2ee57328ddf216dcc5dd4173f21cbccceacc5468220968c41a

  • SSDEEP

    98304:+PtstNbs35Jbepj9ZV/VcIpXpP4OhhpMhA+dd8pyvacS:+aVcIpX3rSzd2

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      1928-3-0x0000000000260000-0x000000000070E000-memory.dmp

    • Size

      4.7MB

    • MD5

      ce18b3885eb836880054b84d86172793

    • SHA1

      c05cf85f3c4a89b26f35df8c23a67c99f4e4eaba

    • SHA256

      947cc79a92b4bbd2b6b3fb444e99ed9c84edcb4513a71c5e1ab1de1cba6368ab

    • SHA512

      7e27f9ad4bf13f06cab5a4b75022dd7b94b4447bf4dca083b6f8907a76a1ef2611e1063d65199d2ee57328ddf216dcc5dd4173f21cbccceacc5468220968c41a

    • SSDEEP

      98304:+PtstNbs35Jbepj9ZV/VcIpXpP4OhhpMhA+dd8pyvacS:+aVcIpX3rSzd2

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks