{"schema":"aeternae-malware-metadata/v1","generated_at":"2026-10-08T09:16:05+00:00","total_matching":1,"page":1,"page_size":200,"records":[{"id":"8c35c906dd5d8bb34c86e683481929ba247e34aa88a9cc28fe4ced17ab5462a0","kind":"reference","title":"Amadey","family":"Amadey","category":"Malware intelligence","summary":"Malware galaxy based on Malpedia archive. | Amadey is a botnet that appeared around October 2018 and is being sold for about 500$ on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called \"tasks\") for all or specifically targ","first_seen":1752587914,"last_seen":1752587914,"created_at":1791440178,"updated_at":1791440178,"source_count":1,"data":{"context":"2025/07/maas-operation-using-emmenhtal-and-amadey.json","tags":["misp:galaxy-name=\"Malpedia\"","misp:galaxy-type=\"malpedia\"","misp-galaxy:malpedia=\"Amadey\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/07/maas-operation-using-emmenhtal-and-amadey.json"],"filenames":[],"features":[],"related_cves":[],"labels":["Amadey"]},"observations":[{"source_id":"talos_ioc","source_url":"https://github.com/Cisco-Talos/IOCs/blob/main/2025/07/maas-operation-using-emmenhtal-and-amadey.json","source_label":"Amadey","evidence_class":"provider_reported","confidence":null,"observed_at":1752587914,"fetched_at":1791440178,"data":{"context":"2025/07/maas-operation-using-emmenhtal-and-amadey.json","tags":["misp:galaxy-name=\"Malpedia\"","misp:galaxy-type=\"malpedia\"","misp-galaxy:malpedia=\"Amadey\""],"aliases":[],"references":["https://github.com/Cisco-Talos/IOCs/blob/main/2025/07/maas-operation-using-emmenhtal-and-amadey.json"],"family":"Amadey"}}],"indicators":[]}]}