Overview

overview

10

Static

static

10

x02303a96b...a3.exe

windows10-2004-x64

10

x02303a96b...a3.exe

windows11-ltsc_2024-x64

10

Resubmissions

20/08/2026, 16:45

260820-t9mt7s1dph10

04/07/2026, 15:26

260704-st8lasg17y10

Sharing

Copy URL Twitter E-mail

General

  • Target
    x02303a96b9f205415e316277f6ec2d1ded7f64ec36f4f633e20b26a6483a7fa3.exe
  • Size 17.4MB
  • Sample260820-t9mt7s1dph
  • SHA256 02303a96b9f205415e316277f6ec2d1ded7f64ec36f4f633e20b26a6483a7fa3
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
amadey282234discoveryinstallertrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 5.80

Botnet

  • 282234

C2

  • http://196.251.107.104

  • http://196.251.107.130

Attributes
  • install_file

    jusched.exe

  • strings_key

    2b027217c3165b773ce9c5d19866b021

  • url_paths

    /Psd8eZaW/index.php

    /h84jjfAr/index.php

rc4.hex

Targets

    • Target
      x02303a96b9f205415e316277f6ec2d1ded7f64ec36f4f633e20b26a6483a7fa3.exe
    • Size 17.4MB
    • SHA256 02303a96b9f205415e316277f6ec2d1ded7f64ec36f4f633e20b26a6483a7fa3
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    282234discoveryamadeyinstallertrojan

    • Family: Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks