Overview

overview

10

Static

static

10

2624-26-0x...ry.exe

windows7-x64

1

2624-26-0x...ry.exe

windows10-2004-x64

1

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2624-26-0x0000000000080000-0x000000000010D000-memory.dmp

  • Size

    564KB

  • Sample

    241216-svlg6atmgs

  • MD5

    8ec5507b0ccde7fc0111303cef61025c

  • SHA1

    ab834f686e857ec1c972cf4fca3eaaf56b97cfd1

  • SHA256

    ccdde999827dc3a74a58dbe4d9dd38cef43be9a277b50c02aacde962273f9230

  • SHA512

    5a2d481a745c0272a8b7bf693e530ad78dc6287447ecaefa3e83f1fde8c0b0145dc28d4f126c4d8b05b0a472e68b62195d7053a96c824c16ba0a416ccc280b9f

  • SSDEEP

    12288:wvVPyleS95rw0PXxXphWtpFnUOnFCViWRg1:b95rFhK5U8Fnyg1

Score
10/10
amadey9c88c6

Malware Config

Extracted

Family

amadey

Version

5.04

Botnet

9c88c6

Attributes
  • install_dir

    c0461fd49a

  • install_file

    Gxtuum.exe

  • strings_key

    1b8c0142f1804d4531696e70270c2eee

  • url_paths

    /pLQvfD4d5/index.php

rc4.plain

Targets

    • Target

      2624-26-0x0000000000080000-0x000000000010D000-memory.dmp

    • Size

      564KB

    • MD5

      8ec5507b0ccde7fc0111303cef61025c

    • SHA1

      ab834f686e857ec1c972cf4fca3eaaf56b97cfd1

    • SHA256

      ccdde999827dc3a74a58dbe4d9dd38cef43be9a277b50c02aacde962273f9230

    • SHA512

      5a2d481a745c0272a8b7bf693e530ad78dc6287447ecaefa3e83f1fde8c0b0145dc28d4f126c4d8b05b0a472e68b62195d7053a96c824c16ba0a416ccc280b9f

    • SSDEEP

      12288:wvVPyleS95rw0PXxXphWtpFnUOnFCViWRg1:b95rFhK5U8Fnyg1

    Score
    1/10
    behavioral1behavioral2

MITRE ATT&CK Matrix

Tasks