amadey | 886897135530f108283e11680ef73c4a00e16e46dc3aaf453dcc49faaab596c9

General

Target
2026-07-29_65948c371e74561fd6be9fd0569fbbe4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260729-m265jsfh44
SHA256 886897135530f108283e11680ef73c4a00e16e46dc3aaf453dcc49faaab596c9
MD5 65948c371e74561fd6be9fd0569fbbe4
SHA1 8bccc66a788330c2d0f25630393d9abb0e42a8ae
SHA512 49226794fb9edc4d8b1cffb3df4b1e09a816179e6272330f7b9f316a535c4d2fbe2121d4aa9e2ecec318c9bb5f44fd8f9146c605b22bc380553d581cb7293ecc
SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3zhQX1d+/mN9p0VHzsAyuWZGUa/Sdfy9103T7fmB4AO5kz:8HF0VK/Wrb4QDwR1QldYzsAlWZBPQqM9
TLSH
T14FA45B217813C032D66192711E69FFF584ADB8269B7109DB7BD0CF7799202E26A31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-29_65948c371e74561fd6be9fd0569fbbe4_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 886897135530f108283e11680ef73c4a00e16e46dc3aaf453dcc49faaab596c9
- MD5 65948c371e74561fd6be9fd0569fbbe4
- SHA1 8bccc66a788330c2d0f25630393d9abb0e42a8ae
- SHA512 49226794fb9edc4d8b1cffb3df4b1e09a816179e6272330f7b9f316a535c4d2fbe2121d4aa9e2ecec318c9bb5f44fd8f9146c605b22bc380553d581cb7293ecc
- SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3zhQX1d+/mN9p0VHzsAyuWZGUa/Sdfy9103T7fmB4AO5kz:8HF0VK/Wrb4QDwR1QldYzsAlWZBPQqM9
- TLSH
  T14FA45B217813C032D66192711E69FFF584ADB8269B7109DB7BD0CF7799202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2