Amadey Bot
Essential information
- Confidence
- 100/100
- Is family
- No
- Published
- 20/12/2025 19:48
- Modified
- 21/12/2025 08:16
- Revoked
- No
- Author / Source
- AlienVault
- Related entities
- 11 attack patterns (mitre), 1 sectors, 8 indicators, 5 vulnerabilities (cve), 1 reports
Description
No description.
Marking (TLP)
TLP:CLEAR
Related entities
Attack patterns, malware, vulnerabilities, indicators, intrusion sets and other entities linked to this malware.
Attack patterns (MITRE) (11)
-
T1566 usesPhishing MITRE
-
T1053 usesScheduled Task/Job MITRE
-
T1218 usesSystem Binary Proxy Execution MITRE
-
T1071 usesApplication Layer Protocol MITRE
-
T1020 usesAutomated Exfiltration MITRE
-
T1055 usesProcess Injection MITRE
-
T1059 usesCommand and Scripting Interpreter MITRE
-
T1574 usesHijack Execution Flow MITRE
-
T1027 usesObfuscated Files or Information MITRE
-
T1036 usesMasquerading MITRE
-
T1204 usesUser Execution MITRE
Sectors (1)
-
Manufacturing targets
Indicators (8)
-
stix 100/100 Revoked· Valid until 21/01/2025 · Source: AlienVault
-
stix 100/100 Revoked
sandboxdetect_misc
· Valid until 28/09/2025 · Source: AlienVault -
stix 100/100 Revoked· Valid until 10/11/2025 · Source: AlienVault
-
berb.fitnessclub-filmfanatics.comindicatesstix 100/100 Revoked· Valid until 10/11/2025 · Source: AlienVault -
stix 100/100 Revoked· Valid until 21/01/2025 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 21/01/2025 · Source: AlienVault
-
stix 100/100 Revoked· Valid until 21/01/2025 · Source: AlienVault
-
stix 100/100 Revoked
Trojan:Win32/CoinMiner.AQ
· Valid until 28/09/2025 · Source: AlienVault
Vulnerabilities (CVE) (5)
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure gateways contain an authentication bypass vulnerability in the …
- Attack vector
- Network
- Published
- 10/01/2024
- Modified
- 27/05/2026
Microsoft Office contains a memory corruption vulnerability that allows remote code execution in the context of the current user.
- Attack vector
- Local
- Complexity
- Low
- Published
- 15/11/2017
- Modified
- 29/05/2026
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure), Ivanti Policy Secure, and Ivanti Neurons contain a server-side request forgery (SSRF) …
- Attack vector
- Network
- Published
- 31/01/2024
- Modified
- 27/05/2026
Ivanti Connect Secure (ICS, formerly known as Pulse Connect Secure) and Ivanti Policy Secure contain a command injection vulnerability in the web …
- Attack vector
- Network
- Published
- 10/01/2024
- Modified
- 27/05/2026
Apache Log4j2 contains a vulnerability where JNDI features do not protect against attacker-controlled JNDI-related endpoints, allowing for remote code execution.
- Attack vector
- Network
- Published
- 10/12/2021
- Modified
- 27/05/2026
Reports (1)
-
11 MITREs 2 Malwares