Overview

overview

10

Static

static

10

SecuriteIn...63.exe

windows10-2004-x64

7

Sharing

Copy URL Twitter E-mail

General

  • Target
    SecuriteInfo.com.Trojan.MulDrop31.39259.2303.13863.exe
  • Size 415KB
  • Sample250625-q2stpsem5y
  • SHA256 6c7dd4256ad4f7f547ca44570eba2dca440fe9cab13939b7c11e845513072cbe
  • MD5 SHA1 SHA512 SSDEEP
Score
10/10
amadey9d54b4discovery

Malware Config

Extracted

Family

  • amadey

Version

  • 5.34

Botnet

  • 9d54b4

C2

  • http://31.43.185.29

Attributes
  • install_dir

    b123d504a3

  • install_file

    gaved.exe

  • strings_key

    846f355884f219e37ae3a1ff38f54ef7

  • url_paths

    /so9rUn3x/index.php

rc4.plain

Targets

    • Target
      SecuriteInfo.com.Trojan.MulDrop31.39259.2303.13863.exe
    • Size 415KB
    • SHA256 6c7dd4256ad4f7f547ca44570eba2dca440fe9cab13939b7c11e845513072cbe
    • MD5 SHA1 SHA512 SSDEEP
    Score
    7/10
    discovery

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks