amadey | 660a9c2dd24183e1b0077fa3d284dee4149093424c93d449f5326cb214d7bc3a

General

Target
2026-07-31_d40a7311bdd785e65072d4ea375f4302_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
Size 472KB
Sample260731-m2vrhshb24
SHA256 660a9c2dd24183e1b0077fa3d284dee4149093424c93d449f5326cb214d7bc3a
MD5 d40a7311bdd785e65072d4ea375f4302
SHA1 eeb86252453f96972e83d5df17e7ac201e8a9211
SHA512 a561c142cba777702514fba14b10a48bf2a262253c074e605cea7c5ab0b37657485a957c38dd0480527327d8e8d300b8623e232a85ea31abbf81083e0cd5e784
SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQB1d+/mN9peVHLsAyuWZGUf/Sday9403T7fm14AO5kw:8HF0VKkWrb4QDwR4Q3dyLsAlWZBOmqM4
TLSH
T1C2A45B217816C032D66192B11E79FFF585ADAC259B7109CB7BC0CF7799202E26A31F39
MD5 SHA1 SHA512 SSDEEP TLSH

Score

10^/10

Malware Config

Extracted

Family

amadey

Version

5.55

Botnet

fbf543

C2

http://94.154.35.25

Attributes

install_dir
96a319e745
install_file
Srxelqcif.exe
strings_key
f8bfac017914b836f3106c5bcd0878fe
url_paths
/di9ku38f/index.php

rc4.plain

Targets

- Target
  2026-07-31_d40a7311bdd785e65072d4ea375f4302_amadey_cobalt-strike_elex_luca-stealer_njrat_smoke-loader
- Size 472KB
- SHA256 660a9c2dd24183e1b0077fa3d284dee4149093424c93d449f5326cb214d7bc3a
- MD5 d40a7311bdd785e65072d4ea375f4302
- SHA1 eeb86252453f96972e83d5df17e7ac201e8a9211
- SHA512 a561c142cba777702514fba14b10a48bf2a262253c074e605cea7c5ab0b37657485a957c38dd0480527327d8e8d300b8623e232a85ea31abbf81083e0cd5e784
- SSDEEP 6144:8HF0VKkWrb4QC1uwzV3ohQB1d+/mN9peVHLsAyuWZGUf/Sday9403T7fm14AO5kw:8HF0VKkWrb4QDwR4Q3dyLsAlWZBOmqM4
- TLSH
  T1C2A45B217816C032D66192B11E79FFF585ADAC259B7109CB7BC0CF7799202E26A31F39
- MD5 SHA1 SHA512 SSDEEP TLSH
Score

10^/10

fbf543 discovery amadey trojan
- Detects Amadey x86-bit Payload
- Family: Amadey
  Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
  trojan amadey
behavioral1 behavioral2

MITRE ATT&CK Enterprise v16

Reconnaissance

Resource Development

Initial Access

Execution

Persistence

Privilege Escalation

Defense Evasion

Credential Access

Discovery

System Location Discovery

1

T1614

System Language Discovery

1

T1614.001

Lateral Movement

Collection

Command and Control

Exfiltration

Impact

Tasks

Sharing

General

Malware Config

Extracted

Targets

Detects Amadey x86-bit Payload

Family: Amadey

MITRE ATT&CK Enterprise v16

Tasks

static1

behavioral1

behavioral2