Overview

overview

10

Static

static

10

All.ElectroRAT.zip

windows10-2004-x64

10

Resubmissions

08/05/2026, 07:18

260508-h44d8ad17s10

01/05/2026, 12:38

260501-pt6vxsfx3w10

Sharing

Copy URL Twitter E-mail

General

  • Target
    All.ElectroRAT.zip
  • Size 881KB
  • Sample260508-h44d8ad17s
  • SHA256 dda14413450a11f336a8305cf274943d614905c3429d4f0efeffe6bf4b8b7bdc
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
amadeykpot044a28creddiscoverymodulestealertrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 2.03

Botnet

  • 044a28

Attributes
  • install_dir

    3101f8f780

  • install_file

    gbudn.exe

  • strings_key

    98efc0765f4c223e79368db4c8650353

  • url_paths

    /hfv23svj2/index.php

rc4.plain

Targets

    • Target
      All.ElectroRAT.zip
    • Size 881KB
    • SHA256 dda14413450a11f336a8305cf274943d614905c3429d4f0efeffe6bf4b8b7bdc
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoverykpotstealertrojan

    • Family: KPOT

      KPOT is an information stealer that steals user data and account credentials.

      trojanstealerkpot

    • KPOT Core Executable

    • Executes dropped EXE

    behavioral1

MITRE ATT&CK Enterprise v16

Tasks