Amadey

Malware Family

35 indicators of compromise attributed to Amadey across abuse.ch threat intelligence feeds.

Domains

6

IPs

5

URLs

11

Hashes

13

Threat types

Botnet C&Cpayload

Sample indicators

adeyqa.netdomainwindowsedgeupdater.comdomainblindbut.icudomainshohetrc.comdomainferalhendown.xyzdomainspasopro.atdomain91.92.242.236ip89.124.78.101ip66.94.119.99ip47.236.116.9ip37.1.213.59iphttp://91.92.242.236/oPvjr94jfe/index.phpurlhttp://196.251.107.248/kont2rt/index.phpurlhttp://89.23.103.42/hb9IvshS02/index.phpurlhttp://89.124.78.101/Lsge63sd3/index.phpurlhttp://196.251.107.104/Psd8eZaW/index.phpurlhttp://spasopro.at/Lsge63sd3/index.phpurlhttp://66.94.119.99/Lsge63sd3/index.phpurlhttp://47.236.116.9/y8jdGc5jS/index.phpurlhttp://37.1.213.59/y8jdGc5jS/index.phpurlhttp://192.162.199.186/aB7xTy2N/mAjOR.phpurlhttp://196.251.107.186/qK3mRv9L/pLdWr.phpurl1d3a5e780488095d6174bcdc49ee16c0ea802a6ahash347187dc7824a887b8f6a3272b3baf12hash49999f257686cfba6fe9504ff99a7776f998e3ba4887d28d2957f040ac346306hash9be1777c6150a1a50e4961902a487ef5hash29352f59456553b5f5484561ad72727866119f00dfa50626b152ec47d68369a9hashf5afd7c8ebd868bde7287829ad63d07e0681cfe2hashebdf48efba35c32ff7bee9db6897aa2d98591a17hash993f015fc9f5a9f683c32541e0039627hash7b7cc6ddaaf7883d131dcf43677381da5707ca6d534b5b2aaae4ec9033a69ec6hashc1cda5f5016b812993dd4858fa6fb949hashc942ecd62cc2de17119903a9adb79dc9a382136288a2a5e9385e856a668a3d7ahash75b70ffacf08e1d1cc7d77fbf3dc719c8711f150hash32eca1b0ebd4e86eb6f1ecad158da1651b62a1882a694cfc835104f68305be03hash