General

  • Target

    2448-3-0x0000000000800000-0x0000000000CB1000-memory.dmp

  • Size

    4.7MB

  • Sample

    241129-et8z6szreq

  • MD5

    f3799f964f203d86a7f4398450267336

  • SHA1

    c25e95d883d686e0bd06899b94c100be0c912082

  • SHA256

    3a10a0c78a0aee6b90f95401dd634e9385e677b9b83cd7f0ea7f0abbfc8c5ecb

  • SHA512

    e0903fad25f93502acebb17f4f763556c34462ca933d28277d425d870a70b60c9d7b9232c6b1bf7f5e86bda2258fa9f80059c722172209c9d3b79eac1bd60450

  • SSDEEP

    98304:elMfLAZzHjKDJ0WI3uoGhT8N+LdUlnA40QmBEE:efzuX15dU70j

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      2448-3-0x0000000000800000-0x0000000000CB1000-memory.dmp

    • Size

      4.7MB

    • MD5

      f3799f964f203d86a7f4398450267336

    • SHA1

      c25e95d883d686e0bd06899b94c100be0c912082

    • SHA256

      3a10a0c78a0aee6b90f95401dd634e9385e677b9b83cd7f0ea7f0abbfc8c5ecb

    • SHA512

      e0903fad25f93502acebb17f4f763556c34462ca933d28277d425d870a70b60c9d7b9232c6b1bf7f5e86bda2258fa9f80059c722172209c9d3b79eac1bd60450

    • SSDEEP

      98304:elMfLAZzHjKDJ0WI3uoGhT8N+LdUlnA40QmBEE:efzuX15dU70j

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Amadey family

MITRE ATT&CK Matrix

Tasks