amadey | 44827f5a8f54e12221a2cc6510b4014cb33f5e5c59e5ae244d7c8788ed0ed278

General

Target
2026-07-31_69ed94c4cd657ff7fae4139c74fbfdb1_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260731-dhb1masepc
SHA256 44827f5a8f54e12221a2cc6510b4014cb33f5e5c59e5ae244d7c8788ed0ed278
MD5 69ed94c4cd657ff7fae4139c74fbfdb1
SHA1 df9943a3dc90bd3e4a5d6b11380b58333f9bfca1
SHA512 54f540ddbc5137386247cfc8da39d63f5bf8f9015a2eb92c44e7af544dfdf3df9d364b535ea44cd86694cefa5c8b8f2a9d35f23da6fd539edf47adca8fca551f
SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQW1d+/mN9pUFHRsAyuWZGUrfSdfy9q03T7fmX4AO5ku:8HF0VKkWrb4QDwR4QQdARsAlWZB7PqMb
TLSH
T1DBA43A217812C033C66192711E79EFF585ADBC259B6109DB7BC4CF7A99202E27A31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-31_69ed94c4cd657ff7fae4139c74fbfdb1_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 44827f5a8f54e12221a2cc6510b4014cb33f5e5c59e5ae244d7c8788ed0ed278
- MD5 69ed94c4cd657ff7fae4139c74fbfdb1
- SHA1 df9943a3dc90bd3e4a5d6b11380b58333f9bfca1
- SHA512 54f540ddbc5137386247cfc8da39d63f5bf8f9015a2eb92c44e7af544dfdf3df9d364b535ea44cd86694cefa5c8b8f2a9d35f23da6fd539edf47adca8fca551f
- SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQW1d+/mN9pUFHRsAyuWZGUrfSdfy9q03T7fmX4AO5ku:8HF0VKkWrb4QDwR4QQdARsAlWZB7PqMb
- TLSH
  T1DBA43A217812C033C66192711E79EFF585ADBC259B6109DB7BC4CF7A99202E27A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2