amadey | 2701f789fea50101b7c03b52ae4a0fffd0d7b4dcf83ba4c6d72d2219c266b134 | Triage

Submit
Reports

Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

Static

static

2376-35-0x...ry.exe

windows7-x64

2376-35-0x...ry.exe

windows10-2004-x64

Sharing

General

Target

2376-35-0x00000000007D0000-0x0000000000ADD000-memory.dmp
Size

3.1MB
Sample

241226-v96srasphw
MD5

1fe1379f5cb46aea2deaf9fc79e08d4f
SHA1

35bd1567252585678acd631f51572be6a760e702
SHA256

2701f789fea50101b7c03b52ae4a0fffd0d7b4dcf83ba4c6d72d2219c266b134
SHA512

29cb25c7f03a1597319cba33f82632b2de8a03a395ff468d9fae57ab0f743f9fa260e5bb90401a72b41e91e38c9d29eb02099bfaddabd4e316d724cc908b25b6
SSDEEP

49152:i2oD/6MA+W4kISDz5y6RK5/blQRr2UxuA:loD/6MA+DkISDz5PK5Tl4/xuA

Score

10^/10

amadey 9c9aa5 trojan

Static task

static1

2 signatures

Behavioral task

behavioral1

Sample

2376-35-0x00000000007D0000-0x0000000000ADD000-memory.exe

Resource

win7-20240903-en

windows7-x64

2 signatures

150 seconds

Behavioral task

behavioral2

Sample

2376-35-0x00000000007D0000-0x0000000000ADD000-memory.exe

Resource

win10v2004-20241007-en

amadey 9c9aa5 trojan

windows10-2004-x64

2 signatures

150 seconds

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes

install_dir
abc3bc1985
install_file
skotes.exe
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
url_paths
/Zu7JuNko/index.php

rc4.plain

1
006700e5a2ab05704bbb0c589b88924d

Targets

- Target
  
  2376-35-0x00000000007D0000-0x0000000000ADD000-memory.dmp
- Size
  
  3.1MB
- MD5
  
  1fe1379f5cb46aea2deaf9fc79e08d4f
- SHA1
  
  35bd1567252585678acd631f51572be6a760e702
- SHA256
  
  2701f789fea50101b7c03b52ae4a0fffd0d7b4dcf83ba4c6d72d2219c266b134
- SHA512
  
  29cb25c7f03a1597319cba33f82632b2de8a03a395ff468d9fae57ab0f743f9fa260e5bb90401a72b41e91e38c9d29eb02099bfaddabd4e316d724cc908b25b6
- SSDEEP
  
  49152:i2oD/6MA+W4kISDz5y6RK5/blQRr2UxuA:loD/6MA+DkISDz5PK5Tl4/xuA
Score

10^/10

amadey trojan 9c9aa5
- Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
- Amadey family
  amadey
behavioral1 behavioral2

MITRE ATT&CK Matrix

Tasks

static1

behavioral1

behavioral2

amadey9c9aa5trojan

© 2018-2025

Terms | Privacy

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.