amadey | a14dae593b28bab7fcb2db19b64913da0a03c07f65a7dba26b11c832ac07f9d0

General

Target
2026-07-29_99819315eeee3b79f156925a7a926a36_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260729-mt968sfg85
SHA256 a14dae593b28bab7fcb2db19b64913da0a03c07f65a7dba26b11c832ac07f9d0
MD5 99819315eeee3b79f156925a7a926a36
SHA1 70ec95e6ff1d5f8ab261b231eac686fc2e7343b0
SHA512 2fa654ce564da45ecec5a0ce815dfd92982f75b1f5747bd52ef5fa651b4078939aeb34b2b01edfb0944bd385d11a8d5d724a506514340b946a547663d4af4b98
SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQi1d+/mN9pnVHzsAyuWZGUf/Sdry9103TGfmd4AO5k4:8HF0VK/Wrb4QDwR4Q0dXzsAlWZBNWqMc
TLSH
T1C9A45B21B813D032C66191711E69FFF585AEA8259B7109DB7BC0CF769D201E26B31F3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-29_99819315eeee3b79f156925a7a926a36_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 a14dae593b28bab7fcb2db19b64913da0a03c07f65a7dba26b11c832ac07f9d0
- MD5 99819315eeee3b79f156925a7a926a36
- SHA1 70ec95e6ff1d5f8ab261b231eac686fc2e7343b0
- SHA512 2fa654ce564da45ecec5a0ce815dfd92982f75b1f5747bd52ef5fa651b4078939aeb34b2b01edfb0944bd385d11a8d5d724a506514340b946a547663d4af4b98
- SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQi1d+/mN9pnVHzsAyuWZGUf/Sdry9103TGfmd4AO5k4:8HF0VK/Wrb4QDwR4Q0dXzsAlWZBNWqMc
- TLSH
  T1C9A45B21B813D032C66191711E69FFF585AEA8259B7109DB7BC0CF769D201E26B31F3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2