amadey

General

Target

1732-3-0x00000000010E0000-0x000000000158E000-memory.dmp
Size

4.7MB
Sample

241226-1naq3s1rax
MD5

49565184835ba9b5dafbd575e0355449
SHA1

c2c194b2cdc2a4694eec8e4adf6b7427ccfbea56
SHA256

f24b1395a08a63550469b9cef29aad9ca1ed8861d92bc7b07af9dd6fe8647924
SHA512

1039cab9c44e9f27e1e6a332bcd0e7a46c87047fd8fe232c7a1e9da3bb5c1e489c8803d616de41b78eb392465e1424729541ff2cc3d8d228407c70277e361de7
SSDEEP

98304:NUdUu1MpF7uvlHOsoF4w7jro7BPtzIfdU/8DpyFTQ2qdg:N/7EivqBPtzIfdUmyZQ2q

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

4.41

Botnet

fed3aa

C2

http://185.215.113.16

Attributes

install_dir
44111dbc49
install_file
axplong.exe
strings_key
8d0ad6945b1a30a186ec2d30be6db0b5
url_paths
/Jo89Ku7d/index.php

rc4.plain

1
a091ec0a6e22276a96a99c1d34ef679c

Targets

- Target
  
  1732-3-0x00000000010E0000-0x000000000158E000-memory.dmp
- Size
  
  4.7MB
- MD5
  
  49565184835ba9b5dafbd575e0355449
- SHA1
  
  c2c194b2cdc2a4694eec8e4adf6b7427ccfbea56
- SHA256
  
  f24b1395a08a63550469b9cef29aad9ca1ed8861d92bc7b07af9dd6fe8647924
- SHA512
  
  1039cab9c44e9f27e1e6a332bcd0e7a46c87047fd8fe232c7a1e9da3bb5c1e489c8803d616de41b78eb392465e1424729541ff2cc3d8d228407c70277e361de7
- SSDEEP
  
  98304:NUdUu1MpF7uvlHOsoF4w7jro7BPtzIfdU/8DpyFTQ2qdg:N/7EivqBPtzIfdUmyZQ2q
Score

10^/10

amadey trojan discovery
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
- Amadey family
  amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v15

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Amadey family

MITRE ATT&CK Enterprise v15

Tasks

static1

behavioral1

behavioral2

We care about your privacy.