amadey | aa75e1b1647ee59a6e4700e2488846a52e55a3426968d01e6bd8f308e343a2d6

General

Target
2026-07-31_0976006217e98289f0373158e21035e0_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260731-d4y3aavyas
SHA256 aa75e1b1647ee59a6e4700e2488846a52e55a3426968d01e6bd8f308e343a2d6
MD5 0976006217e98289f0373158e21035e0
SHA1 54aff23abaea6ab3b764fb3a48c37fb8ac270866
SHA512 8b6fb7fd7eb00635a410fb0c16653f3ae40ace08abfbd56f5ba16b387e45d792728366101c1efebef0ac64f3b62e3f05a0cde037f4f4badac93d9b3e7a7b8816
SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQU1di/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kQ:8HF0VKkWrb4QDwR4QWd+zsAlWZBm4qMO
TLSH
T182A44B217813C032D66191721F79FFF585ADA8259B7109DB7BC0CF769A202E26A31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-31_0976006217e98289f0373158e21035e0_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 aa75e1b1647ee59a6e4700e2488846a52e55a3426968d01e6bd8f308e343a2d6
- MD5 0976006217e98289f0373158e21035e0
- SHA1 54aff23abaea6ab3b764fb3a48c37fb8ac270866
- SHA512 8b6fb7fd7eb00635a410fb0c16653f3ae40ace08abfbd56f5ba16b387e45d792728366101c1efebef0ac64f3b62e3f05a0cde037f4f4badac93d9b3e7a7b8816
- SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQU1di/mN9peVHzsAyuWZGUf/Sdfy9103T7fmj4AO5kQ:8HF0VKkWrb4QDwR4QWd+zsAlWZBm4qMO
- TLSH
  T182A44B217813C032D66191721F79FFF585ADA8259B7109DB7BC0CF769A202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2