Overview

overview

10

Static

static

10

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_1ba93c53ead619cc89b894027bbe682e_amadey_black-basta_luca-stealer_smoke-loader

  • Size

    2.0MB

  • Sample

    250406-kfcygavtfs

  • MD5

    1ba93c53ead619cc89b894027bbe682e

  • SHA1

    fc92f89eedc818585135d6db8eaf7f34a3d4c059

  • SHA256

    0311036194da0b860f07e354ff37e1339bd258a6926b33f95cdb4f8dbc078226

  • SHA512

    2104c59cebc28727b2c9a9b44c46e01dc2eda51034012cba25191fbf2ba79eda03f45e36151eaf387f3c2783a77029b2e81a52bce3349a66530c0d0df86f8933

  • SSDEEP

    49152:l0jVE+totBeaMM8qw0tnvXv9LZVJNoFJauFWXX:l0RpM8p09vXVZtocX

Score
10/10
amadey092155discoverytrojan

Malware Config

Extracted

Family

amadey

Version

5.21

Botnet

092155

C2

http://176.113.115.6

Attributes
  • install_dir

    bb556cff4a

  • install_file

    rapes.exe

  • strings_key

    a131b127e996a898cd19ffb2d92e481b

  • url_paths

    /Ni9kiput/index.php

rc4.plain

Targets

    • Target

      2025-04-06_1ba93c53ead619cc89b894027bbe682e_amadey_black-basta_luca-stealer_smoke-loader

    • Size

      2.0MB

    • MD5

      1ba93c53ead619cc89b894027bbe682e

    • SHA1

      fc92f89eedc818585135d6db8eaf7f34a3d4c059

    • SHA256

      0311036194da0b860f07e354ff37e1339bd258a6926b33f95cdb4f8dbc078226

    • SHA512

      2104c59cebc28727b2c9a9b44c46e01dc2eda51034012cba25191fbf2ba79eda03f45e36151eaf387f3c2783a77029b2e81a52bce3349a66530c0d0df86f8933

    • SSDEEP

      49152:l0jVE+totBeaMM8qw0tnvXv9LZVJNoFJauFWXX:l0RpM8p09vXVZtocX

    Score
    10/10
    amadeydiscoverytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Amadey family

      amadey
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks