amadey | 84f8ea00b5b808533f2ffd6a770028ba80ca71c601179d486b41da10a844f02a

General

Target
2026-07-29_b4d39b76033430067ea6bc67b2e6ec19_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260729-mpws2stxfx
SHA256 84f8ea00b5b808533f2ffd6a770028ba80ca71c601179d486b41da10a844f02a
MD5 b4d39b76033430067ea6bc67b2e6ec19
SHA1 d0aba67ce219d0c2a2ecc6569f8a32e8c36a1886
SHA512 432b79177af99ab4584aa2f366882c858ae1f9deba1823c89e9eef2d1aa842f14e50446ea02cde217bedae000509a6d104c047ea1de5f213b0bacc2d830a932c
SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQB1d+/mN9pmVHzsAyuWZGUf/SdAy9Z03T7fmj4AO5kK:8HF0VK/Wrb4QDwR4Q3dWzsAlWZBhgqMU
TLSH
T1D6A44A617813C033D66191721E79EFF684ADA8259B7109DB77C0CF769A201E26B32F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-29_b4d39b76033430067ea6bc67b2e6ec19_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 84f8ea00b5b808533f2ffd6a770028ba80ca71c601179d486b41da10a844f02a
- MD5 b4d39b76033430067ea6bc67b2e6ec19
- SHA1 d0aba67ce219d0c2a2ecc6569f8a32e8c36a1886
- SHA512 432b79177af99ab4584aa2f366882c858ae1f9deba1823c89e9eef2d1aa842f14e50446ea02cde217bedae000509a6d104c047ea1de5f213b0bacc2d830a932c
- SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQB1d+/mN9pmVHzsAyuWZGUf/SdAy9Z03T7fmj4AO5kK:8HF0VK/Wrb4QDwR4Q3dWzsAlWZBhgqMU
- TLSH
  T1D6A44A617813C033D66191721E79EFF684ADA8259B7109DB77C0CF769A201E26B32F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2