Amadey

Malware Family

12 006 indicators of compromise attributed to Amadey across abuse.ch threat intelligence feeds.

Domains

8

IPs

10

URLs

58

Hashes

11 930

Download indicators

Indicator lists for this family. Free and anonymous downloads are a 10% sample.

Need continuous updates instead of static lists? The same IOCs ship in the STIX/TAXII threat feed, ready for OpenCTI and MISP.

Threat types

Botnet C&Cpayload

Sample indicators

IndicatorType
uybwveyvyt62rc.sitedomain
zsv2c62243.spacedomain
spasopro.atdomain
adeyqa.netdomain
windowsedgeupdater.comdomain
blindbut.icudomain
shohetrc.comdomain
feralhendown.xyzdomain
91.92.242.236ip
37.1.213.59ip
47.236.116.9ip
66.94.119.99ip
89.124.78.101ip
176.65.144.60ip
158.94.210.91ip
89.45.6.18ip
193.143.1.16ip
185.215.113.43ip
http://196.251.107.248/kont2rt/index.phpurl
http://atraflaxtt.com/g9sjh3djv/index.phpurl
http://192.162.199.186/aB7xTy2N/mAjOR.phpurl
http://196.251.107.186/qK3mRv9L/pLdWr.phpurl
http://47.236.116.9/y8jdGc5jS/index.phpurl
http://arbitrarycode.site/bPwsAq2/ndex.phpurl
http://adminstatus.site/bPwsAq2/ndex.phpurl
http://91.92.242.236/oPvjr94jfe/Login.phpurl
http://163.245.208.50/Psd8eZaW/index.phpurl
http://62.60.226.159/Psd8eZaW/index.phpurl
https://77.91.97.162/g93kdwj3s/index.phpurl
https://112.133.215.23/mylibrary/index.phpurl
http://89.45.6.18/oPvjr94jfe/index.phpurl
http://tve-mail.com/forum/index.phpurl
http://62.60.227.98/g8jejfC38/index.phpurl
http://94.154.35.25/di9ku38f/index.phpurl
http://system-update.cloud/Di0Her478/index.phpurl
https://79.137.203.19/7hgd5fx4/index.phpurl
http://o7labs.top/online/support/index.phpurl
http://193.56.146.243/h8V2cQlbd3/index.phpurl
4b3214ca5ec9721278989a43bf21b9450e5b8597dae25a4262dbece4a1193351hash
cff5458b84a20a371d01a8d5d1549105730ac937c797ff56627b490cf2ac0888hash
662fa69addaba2dada857a86111b8dcbfaf186121e68b0d93ab20fced493eec6hash
b76092c2015150b00e789bc97cde2a7a3ce2436d288277df5239090333eb57d0hash
e7c9b2c672f84f1e1a4fa35899e1f65d4956940083b620f34b6796e26b4021cbhash
31b26a826ad9c12d2be7c177e2fc192c80bc627ad2b5c41830479e3f947dc7d1hash
878e2f1dd00108d6236cac74e8a17b2340729551be62debf9b2e006a80e07e6fhash
df659e6350471addf6200bca3571a658511e9ccbc57a27707a33d8d096d08334hash
b1aab072ac9b3880cbfb087bdd3e7dfecaace4de5bc7d00e4a7238feeb05c787hash
1783a69593b72237fce4111d231ab3c919f9220e8baf8b2216c488d4dbedcdf1hash
6b89cdfe0d3ebc90994ee564aac9c88b0df80f25720aedadff660a0d079ad0c9hash
e0a4697b1e6b88ea843694ba6035db8d67bb99dbe1fa6b59f02af8646cc8a629hash
e6b3675647e05fc0b5790bf60b4e6f6d68692d82d8fb8e93d9dad0a5d478b933hash
656bd651d2cf4901352c0d1a4aba42d7d6c2340987439749124f9e617efb2199hash
9ac53886a06ff7a748499d807e91dcdcf4be74bb219996016097354cf36f3065hash
c8d16955d6e7dec1cc0effb4e8b0d8cdfe53e8f47ed740ee0b0b186f7cc76406hash
043a5c72b3eba0a7aade097438abb9fccee1dbeadd4bbd63ee422a37e8076edchash
6d050aadb83a70cd936d8e28b59eeee1b271cac82f330bd67671ff6f2fad0321hash
cfd691debcd626b55d4d5f1619f4aa5a131376dd11430e233245561be9b2fc11hash
2d4a1b377466ce663d6dab8eab39b87033b34dba3afc79510282de0c1e58cf4fhash