Overview

overview

10

Static

static

3

msu.exe

windows10-2004-x64

10

msu.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    msu.exe
  • Size 699KB
  • Sample261015-cpjtdatt2m
  • SHA256 ba095309edf1ddfa43820019068084574c4fc3646d54b84b10315471106316bf
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
amadeydiscoverytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 6.01

C2

  • http://109.238.87.75

Attributes
  • install_dir

    1e2ce0e70e

  • install_file

    Wrzcp.exe

  • strings_key

    03bba9646165c9d9b8cf9cd339319bc6

  • url_paths

    /g84kfS5n/index.php

rc4.plain

Targets

    • Target
      msu.exe
    • Size 699KB
    • SHA256 ba095309edf1ddfa43820019068084574c4fc3646d54b84b10315471106316bf
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryamadeytrojan

    • Detects Amadey x86-bit Payload

    • Family: Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks