amadey | 278b5340b68abe8bc711242bd77b2220b0baefb18e92b024ce20b6791b0aad13

General

Target
2026-07-31_92bea6c53289d993e07026061e28e208_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260731-dakb2abe89
SHA256 278b5340b68abe8bc711242bd77b2220b0baefb18e92b024ce20b6791b0aad13
MD5 92bea6c53289d993e07026061e28e208
SHA1 794e56254c0a5ecd8beb7ddc3a383436fc5af9ef
SHA512 0cf13118ecf03c5d4525e7517e47f2953fc99f53d5f28975614c3f6a95f4eb0ee7fb5559289ecb06a3277025d72acd65657835d3d4906a18089ef3d09692131c
SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQg1d+/mN9pi5HzsAyuWZGUv/SdOyKR03T7ftw4AO5kr:8HF0VK/Wrb4QDwR4Q6d+zsAlWZB64qMt
TLSH
T1B6A46C227813C033D6A191762F69EFF584ADA8259B3009DB77C4CF7699201E26B31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-31_92bea6c53289d993e07026061e28e208_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 278b5340b68abe8bc711242bd77b2220b0baefb18e92b024ce20b6791b0aad13
- MD5 92bea6c53289d993e07026061e28e208
- SHA1 794e56254c0a5ecd8beb7ddc3a383436fc5af9ef
- SHA512 0cf13118ecf03c5d4525e7517e47f2953fc99f53d5f28975614c3f6a95f4eb0ee7fb5559289ecb06a3277025d72acd65657835d3d4906a18089ef3d09692131c
- SSDEEP 6144:8HF0VK/Wrb4QC1uwzV3ohQg1d+/mN9pi5HzsAyuWZGUv/SdOyKR03T7ftw4AO5kr:8HF0VK/Wrb4QDwR4Q6d+zsAlWZB64qMt
- TLSH
  T1B6A46C227813C033D6A191762F69EFF584ADA8259B3009DB77C4CF7699201E26B31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2