Skip to main content

Amadey

Malware Family

12 045 indicators of compromise attributed to Amadey across abuse.ch threat intelligence feeds.

Domains

8

IPs

12

URLs

64

Hashes

11 961

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Domains (8)IPs (12)URLs (64)Hashes (11 961)

For continuous updates, the same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
uybwveyvyt62rc.sitedomain
zsv2c62243.spacedomain
spasopro.atdomain
adeyqa.netdomain
windowsedgeupdater.comdomain
blindbut.icudomain
shohetrc.comdomain
feralhendown.xyzdomain
91.92.242.236ip
37.1.213.59ip
47.236.116.9ip
66.94.119.99ip
89.124.78.101ip
176.65.144.60ip
158.94.210.91ip
89.45.6.18ip
193.143.1.16ip
185.215.113.43ip
193.178.158.107ip
193.178.158.71ip
http://atraflaxtt.com/g9sjh3djv/index.phpurl
http://196.251.107.186/qK3mRv9L/pLdWr.phpurl
http://66.94.119.99/Lsge63sd3/index.phpurl
http://spasopro.at/Lsge63sd3/index.phpurl
http://bugmenot.site/bPwsAq2/ndex.phpurl
http://adminstatus.site/bPwsAq2/ndex.phpurl
http://91.92.242.236/oPvjr94jfe/Login.phpurl
http://o7labs.top/visual/skins/index.phpurl
http://196.251.107.130/h84jjfAr/index.phpurl
http://tve-mail.com/forum/index.phpurl
http://support.avs4soft.comurl
https://23.254.229.88/attivita/index.phpurl
http://62.60.227.98/g8jejfC38/index.phpurl
https://66.129.66.16/mailgust/index.phpurl
http://89.23.103.42/hb9IvshS02/index.phpurl
http://185.174.137.152/jb9sZZZbv7/index.phpurl
http://62.204.41.151/8vcWxwwx3/index.phpurl
http://193.56.146.243/h8V2cQlbd3/index.phpurl
http://185.215.113.206/k8FppT/index.phpurl
http://194.102.105.70/8jdjZhdf7/index.phpurl
e91cd6f3491d050a5583a85a8a9a661523f373a00251fa4dbccda2c865e7cef9hash
268d7f9c8392bbbbc8ee85c8d1038dd566f10e2649caa32ecc5087d9719c62f3hash
3be783d9ad6beb8c15505432da9f53b9c689467bf3d17852480fcf805705554dhash
23d3fac0bc3a2dacdd5525b0e0715258b2e72d0f8f64fd59eef4688a2884c996hash
e8f0e3fe795f96909d2ce54434a20f0c87a8bde815e790a7de9fd48b7eb11969hash
3d966faf6abea9dc401515b863887466f6f5913b0c27e1d79d7bebc994efb16ehash
194835eb02355f19409d0497e6f5d75d204d9ccf4c5564654c12fd511aa920b4hash
194b68b30d0520d36501b48fce0beb4558d8b82afba1943709b4f761a83b7233hash
de1e4c8df120d3a1fe46093c55594635b5d104595680a2eeaf9c3b84227c0d79hash
a55110ed6b68922a0dd71669042b4b6ce0724ebb1c46d79aabe56c0083e5b570hash
f93c8d9775eda271854686280104c206671637e5e166d7435138401d1e180ca7hash
7f2491abdc6f87d9e142f1c57e4f34ca229b1d86e4c0a8e91c0ee78d0c1fc830hash
b6e84a9f18fe4dc7f992270daae3133f3601febe13e0280180ceabda7009617dhash
c2b5944c9c75cd9124f93c290aa36e7555976b3c7f532831d07dcae75d1a7920hash
b2bc1ed2477f32632f4d22c004acd6de6906db9353a5f0ec67d53d282b19cb84hash
2d0dcb85105ff518861fbdce77e06ff80b49ba9b6f1643060cc875cf8bb08eabhash
20421ef56eceb8a746cf4fa86f2efe10688f59edc22cfcedefbb7441578a839chash
32d15d66d8dd38cc74a20b29a8a00deecfa93b1dc00190d3cc4ea7c29dc324echash
7fa432168553f813e274fde1bb8f8c351c3eec40cd80cc84f1ea57276bf8189ahash
f8008e9eb63d1c2ea9423ceb09483465929261cf83608b9448c21190ca5d7a81hash

Another file to check? Run a file hash reputation check.