amadey | 37307b7940c9516836f73cef756b2a48ea5cee77265d738ce51672a72d638996 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2556-3-0x0...ry.exe

windows7-x64

2556-3-0x0...ry.exe

windows10-2004-x64

Sharing

General

Target

2556-3-0x0000000000E00000-0x00000000012B2000-memory.dmp
Size

4.7MB
Sample

241226-v53kjasnay
MD5

68c3f326e30c0201f429d158faaf09d5
SHA1

58841f29d052dedf662fc6b9b554b0d85d2b8f0f
SHA256

37307b7940c9516836f73cef756b2a48ea5cee77265d738ce51672a72d638996
SHA512

6b5a4a4ab18a02b20f87ff2b90cbe4f40d0607299ddb12463c644b39339dc5e7ff2df4b50b66046ce9162814e33ab1049055a0c08aa47f27c93579f9a8c4d645
SSDEEP

98304:9YaD7htazD+54/1WljAw5VLuZ2yZXBvFeawgPwP1TRme/BIwa:97D2Z7ZRvETgIPt/BIw

Score

10^/10

amadey fed3aa trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2556-3-0x0000000000E00000-0x00000000012B2000-memory.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

2556-3-0x0000000000E00000-0x00000000012B2000-memory.exe

Resource

win10v2004-20241007-en

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Extracted

Family

amadey

Version

4.41

Botnet

fed3aa

C2

http://185.215.113.16

Attributes

install_dir
44111dbc49
install_file
axplong.exe
strings_key
8d0ad6945b1a30a186ec2d30be6db0b5
url_paths
/Jo89Ku7d/index.php

rc4.plain

1
a091ec0a6e22276a96a99c1d34ef679c

Targets

- Target
  
  2556-3-0x0000000000E00000-0x00000000012B2000-memory.dmp
- Size
  
  4.7MB
- MD5
  
  68c3f326e30c0201f429d158faaf09d5
- SHA1
  
  58841f29d052dedf662fc6b9b554b0d85d2b8f0f
- SHA256
  
  37307b7940c9516836f73cef756b2a48ea5cee77265d738ce51672a72d638996
- SHA512
  
  6b5a4a4ab18a02b20f87ff2b90cbe4f40d0607299ddb12463c644b39339dc5e7ff2df4b50b66046ce9162814e33ab1049055a0c08aa47f27c93579f9a8c4d645
- SSDEEP
  
  98304:9YaD7htazD+54/1WljAw5VLuZ2yZXBvFeawgPwP1TRme/BIwa:97D2Z7ZRvETgIPt/BIw
Score

10^/10

amadey trojan
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
- Amadey family
  amadey
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.