amadey | 7853fadbacea9b8e567d60b77eff30d425b825116befaef09601e533ae0d6332

General

Target
2026-07-31_09ba9895ce7be934f95a1afbf20578a6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260731-d4w8patbja
SHA256 7853fadbacea9b8e567d60b77eff30d425b825116befaef09601e533ae0d6332
MD5 09ba9895ce7be934f95a1afbf20578a6
SHA1 3a77ef34fb255470b6b08bcd3b61dc0ff720ef81
SHA512 95901ae12a53d1a1bedee00306521bf5bf28358fef1db9c78afe263dcad2483237c5e6d11ed6a26129f87556436119b13d1ceb86297a9cc66f26d3acd56da556
SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ehQZ1d+/mN9pLVH3sAtuWZGUw/Sdfy9P03T7fmc4AO5ko:8HF0VK/Wrb4QDwRWQfd/3sA0WZBmqqMQ
TLSH
T14EA46C217817C473C66191B52E69FFF184ADAC259B2108DB7BC4CF7B99101E26B31E3A
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-31_09ba9895ce7be934f95a1afbf20578a6_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 7853fadbacea9b8e567d60b77eff30d425b825116befaef09601e533ae0d6332
- MD5 09ba9895ce7be934f95a1afbf20578a6
- SHA1 3a77ef34fb255470b6b08bcd3b61dc0ff720ef81
- SHA512 95901ae12a53d1a1bedee00306521bf5bf28358fef1db9c78afe263dcad2483237c5e6d11ed6a26129f87556436119b13d1ceb86297a9cc66f26d3acd56da556
- SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ehQZ1d+/mN9pLVH3sAtuWZGUw/Sdfy9P03T7fmc4AO5ko:8HF0VK/Wrb4QDwRWQfd/3sA0WZBmqqMQ
- TLSH
  T14EA46C217817C473C66191B52E69FFF184ADAC259B2108DB7BC4CF7B99101E26B31E3A
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2