Overview

overview

10

Static

static

ed4e77ea93...1b.exe

windows7_x64

10

ed4e77ea93...1b.exe

windows10_x64

10

Sharing

Copy URL Twitter E-mail

General

  • Target
    ed4e77ea9305aeae3b545735358b6d1b.exe
  • Size 345KB
  • Sample210408-e9vtp1qwwe
  • SHA256 462874360a3b4cff7c9fab2448ae25bca022253e71af71b128af502136e8b2e6
  • MD5 SHA1 SHA512
Score
10/10
amadeytrojan

Malware Config

Extracted

Family

  • amadey

Version

  • 2.14

C2

  • cdn12-web-security.com/gf4EdsW/index.php

  • shegw583reg.hopto.org/gf4EdsW/index.php

Targets

    • Target
      ed4e77ea9305aeae3b545735358b6d1b.exe
    • Size 345KB
    • SHA256 462874360a3b4cff7c9fab2448ae25bca022253e71af71b128af502136e8b2e6
    • MD5 SHA1 SHA512
    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Executes dropped EXE

    • Loads dropped DLL

    • Suspicious use of NtSetInformationThreadHideFromDebugger

    • Suspicious use of SetThreadContext

    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks