Overview

overview

10

Static

static

3

msu.exe

windows10-2004-x64

10

msu.exe

windows11-ltsc_2024-x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    msu.exe
  • Size 700KB
  • Sample261017-knpx1acy21
  • SHA256 9208cec87a55a92926e2b5f3b82c064faada20f98c20729fac0943e6b9400bf2
  • MD5 SHA1 SHA512 SSDEEP TLSH
Score
10/10
amadeydiscoverytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 6.01

C2

  • http://109.238.87.75

Attributes
  • install_dir

    1e2ce0e70e

  • install_file

    Wrzcp.exe

  • strings_key

    03bba9646165c9d9b8cf9cd339319bc6

  • url_paths

    /g84kfS5n/index.php

rc4.plain

Targets

    • Target
      msu.exe
    • Size 700KB
    • SHA256 9208cec87a55a92926e2b5f3b82c064faada20f98c20729fac0943e6b9400bf2
    • MD5 SHA1 SHA512 SSDEEP TLSH
    Score
    10/10
    discoveryamadeytrojan

    • Detects Amadey x86-bit Payload

    • Family: Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey
    behavioral1behavioral2

MITRE ATT&CK Enterprise v16

Tasks