Overview

overview

10

Static

static

10

2025-04-06...er.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2025-04-06_bcebcc9d00abbd78a7e08e89c84a219d_amadey_black-basta_luca-stealer_smoke-loader

  • Size

    2.0MB

  • Sample

    250406-pbzc5axyev

  • MD5

    bcebcc9d00abbd78a7e08e89c84a219d

  • SHA1

    af4fc3d80b0ea1e6e227748fe145ca67957806e8

  • SHA256

    692f77f4168b9d59dbffbdeca921d218c7cb42dc1b596b98ecc7f530788c8361

  • SHA512

    7bfb6b328d55d3b9566adb18125c24b34fb9a4dea118c2a1f469b85d14dc59f9f2872e01683b18227c47c0bcf7fce165aebfbd831ba33179742274c994d12a93

  • SSDEEP

    49152:CIXqRSnB4GPkctL61qgSCMHo/P6CJI9Lqj4wQx:CIGSB46kctL6AoMHo6CJI9Lf

Score
10/10
amadey092155discoverytrojan

Malware Config

Extracted

Family

amadey

Version

5.21

Botnet

092155

C2

http://176.113.115.6

Attributes
  • install_dir

    bb556cff4a

  • install_file

    rapes.exe

  • strings_key

    a131b127e996a898cd19ffb2d92e481b

  • url_paths

    /Ni9kiput/index.php

rc4.plain

Targets

    • Target

      2025-04-06_bcebcc9d00abbd78a7e08e89c84a219d_amadey_black-basta_luca-stealer_smoke-loader

    • Size

      2.0MB

    • MD5

      bcebcc9d00abbd78a7e08e89c84a219d

    • SHA1

      af4fc3d80b0ea1e6e227748fe145ca67957806e8

    • SHA256

      692f77f4168b9d59dbffbdeca921d218c7cb42dc1b596b98ecc7f530788c8361

    • SHA512

      7bfb6b328d55d3b9566adb18125c24b34fb9a4dea118c2a1f469b85d14dc59f9f2872e01683b18227c47c0bcf7fce165aebfbd831ba33179742274c994d12a93

    • SSDEEP

      49152:CIXqRSnB4GPkctL61qgSCMHo/P6CJI9Lqj4wQx:CIGSB46kctL6AoMHo6CJI9Lf

    Score
    10/10
    amadeydiscoverytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Amadey family

      amadey
    behavioral1

MITRE ATT&CK Enterprise v15

Tasks