Overview

overview

10

Static

static

10

4804-35-0x...ry.exe

windows7-x64

1

4804-35-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4804-35-0x0000000000E60000-0x0000000001327000-memory.dmp

  • Size

    4.8MB

  • Sample

    241202-lr4q1awjbk

  • MD5

    b5739897c787c945d049203d14ee46ef

  • SHA1

    42b9e412e844e01aa71e90d6b9af7c5fd63e797b

  • SHA256

    5ad08c55ef954ed5534c6182ef67afcbadf70c115fcc80a417256e44052fd3c5

  • SHA512

    2d98252c57c6e80682440a32df81192ec3d287809e21df650ee86a53bb6ad634c6e41fc8db1212e40ba6d11c631ce4d32d05cb4bde052e33f5d09953d310f79c

  • SSDEEP

    98304:7fUktP4bRkP9eikrGF+MRzeJJK45r+i9pxo:77F+M1e5L6

Score
10/10
amadey9c9aa5trojan

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    • Target

      4804-35-0x0000000000E60000-0x0000000001327000-memory.dmp

    • Size

      4.8MB

    • MD5

      b5739897c787c945d049203d14ee46ef

    • SHA1

      42b9e412e844e01aa71e90d6b9af7c5fd63e797b

    • SHA256

      5ad08c55ef954ed5534c6182ef67afcbadf70c115fcc80a417256e44052fd3c5

    • SHA512

      2d98252c57c6e80682440a32df81192ec3d287809e21df650ee86a53bb6ad634c6e41fc8db1212e40ba6d11c631ce4d32d05cb4bde052e33f5d09953d310f79c

    • SSDEEP

      98304:7fUktP4bRkP9eikrGF+MRzeJJK45r+i9pxo:77F+M1e5L6

    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Amadey family

      amadey
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks