Overview

overview

10

Static

static

10

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_cb620773fbb37f17980d4f1496779240_amadey_black-basta_luca-stealer_smoke-loader

  • Size

    2.1MB

  • Sample

    250406-kw1dpsxqt4

  • MD5

    cb620773fbb37f17980d4f1496779240

  • SHA1

    a044cc2df88bab1ef5beb524bfc41348ae91291b

  • SHA256

    78a5763996f9798a6008410de7ca704ec1d1245bcdb55dc0fe1cdd2f64ebc575

  • SHA512

    f1f60fa4920fec725ae95952e78d6640357257c6d44d1b9e018eabd9186d28e3237fff1c4ea77f90bb2e3de5512dd19efca4abbcd76d0a4d67973ed857d1538d

  • SSDEEP

    49152:LyMIpQbfDdk1P/9uwrUFVOCZ2VFXTfSSpYmds0:LyxeWVrUTOpVZTSSpk0

Score
10/10
amadey092155discoverytrojan

Malware Config

Extracted

Family

amadey

Version

5.21

Botnet

092155

C2

http://176.113.115.6

Attributes
  • install_dir

    bb556cff4a

  • install_file

    rapes.exe

  • strings_key

    a131b127e996a898cd19ffb2d92e481b

  • url_paths

    /Ni9kiput/index.php

rc4.plain

Targets

    • Target

      2025-04-06_cb620773fbb37f17980d4f1496779240_amadey_black-basta_luca-stealer_smoke-loader

    • Size

      2.1MB

    • MD5

      cb620773fbb37f17980d4f1496779240

    • SHA1

      a044cc2df88bab1ef5beb524bfc41348ae91291b

    • SHA256

      78a5763996f9798a6008410de7ca704ec1d1245bcdb55dc0fe1cdd2f64ebc575

    • SHA512

      f1f60fa4920fec725ae95952e78d6640357257c6d44d1b9e018eabd9186d28e3237fff1c4ea77f90bb2e3de5512dd19efca4abbcd76d0a4d67973ed857d1538d

    • SSDEEP

      49152:LyMIpQbfDdk1P/9uwrUFVOCZ2VFXTfSSpYmds0:LyxeWVrUTOpVZTSSpk0

    Score
    10/10
    amadeydiscoverytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Amadey family

      amadey
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks