Overview

overview

10

Static

static

10

2116-36-0x...ry.exe

windows7-x64

1

2116-36-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2116-36-0x00000000004C0000-0x0000000000535000-memory.dmp

  • Size

    468KB

  • Sample

    241216-sgw2qstran

  • MD5

    ce8d88ed2fd9b302c5f2ca0e622c333a

  • SHA1

    359bda39d4a87c03444df594334e109ab97720bc

  • SHA256

    4d65afff7824094484c29bd9221f0e2f7de42d716a84008c14777058251af41e

  • SHA512

    6d93e7c5b168720abbdd363671f94e3376ff02f255bac51a95e869215e4caaed401b7b06c83512bb2160f85752275361c5d05abb76991bb135955fdd352fca36

  • SSDEEP

    12288:/bSvdLqlG29ZH4IXXV/tdGpxFTYefNKWUmyyiRg:/p9ZHhdWNYUNKWUmpWg

Score
10/10
amadey9c88c6

Malware Config

Extracted

Family

amadey

Version

5.04

Botnet

9c88c6

Attributes
  • install_dir

    c0461fd49a

  • install_file

    Gxtuum.exe

  • strings_key

    1b8c0142f1804d4531696e70270c2eee

  • url_paths

    /pLQvfD4d5/index.php

rc4.plain

Targets

    • Target

      2116-36-0x00000000004C0000-0x0000000000535000-memory.dmp

    • Size

      468KB

    • MD5

      ce8d88ed2fd9b302c5f2ca0e622c333a

    • SHA1

      359bda39d4a87c03444df594334e109ab97720bc

    • SHA256

      4d65afff7824094484c29bd9221f0e2f7de42d716a84008c14777058251af41e

    • SHA512

      6d93e7c5b168720abbdd363671f94e3376ff02f255bac51a95e869215e4caaed401b7b06c83512bb2160f85752275361c5d05abb76991bb135955fdd352fca36

    • SSDEEP

      12288:/bSvdLqlG29ZH4IXXV/tdGpxFTYefNKWUmyyiRg:/p9ZHhdWNYUNKWUmpWg

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks