amadey | 774a350a1aed1ad5ef9d4165673d8cdb80d0920c2ae9746332d56b146b5bcd5e

General

Target
2026-07-29_f52cadecf11a41af1402009921a61b13_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260729-mexmlatvfs
SHA256 774a350a1aed1ad5ef9d4165673d8cdb80d0920c2ae9746332d56b146b5bcd5e
MD5 f52cadecf11a41af1402009921a61b13
SHA1 cc31472111b38864e2c0e1086a0e911d09ec008a
SHA512 3333be2020e66aa93e0e5e9df5839b3b239dfdfd84531e443c4ad193095ca9318942d2ffc4780930d9d3312380c63065602f64fb088f51241c38904c23ebc04a
SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHJsAyuWZGUU/Sdfy9103T7fm14AO5kj:8HF0VKkWrb4QDwR4QWdyJsAlWZBV7qMK
TLSH
T192A44B217812C032D66191721FB9FFF585ADB8259B7109DB7BC0CF7699202E26A31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-29_f52cadecf11a41af1402009921a61b13_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 774a350a1aed1ad5ef9d4165673d8cdb80d0920c2ae9746332d56b146b5bcd5e
- MD5 f52cadecf11a41af1402009921a61b13
- SHA1 cc31472111b38864e2c0e1086a0e911d09ec008a
- SHA512 3333be2020e66aa93e0e5e9df5839b3b239dfdfd84531e443c4ad193095ca9318942d2ffc4780930d9d3312380c63065602f64fb088f51241c38904c23ebc04a
- SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQU1d+/mN9peVHJsAyuWZGUU/Sdfy9103T7fm14AO5kj:8HF0VKkWrb4QDwR4QWdyJsAlWZBV7qMK
- TLSH
  T192A44B217812C032D66191721FB9FFF585ADB8259B7109DB7BC0CF7699202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2