talos_ioc
- Source-provided label
- Amadey
- Evidence class
- provider reported
- Confidence
- Not reported
- Observed
- Jul 15, 2025 13:58 UTC
- Retrieved
- Oct 08, 2026 06:16 UTC
Amadey
Malware galaxy based on Malpedia archive. | Amadey is a botnet that appeared around October 2018 and is being sold for about 500$ on Russian-speaking hacking forums. It periodically sends information about the system and installed AV software to its C2 server and polls to receive orders from it. Its main functionality is that it can load other payloads (called "tasks") for all or specifically targ
Reference details
- Primary displayed family label
- Amadey
- Source category
- Malware intelligence
- Source context
2025/07/maas-operation-using-emmenhtal-and-amadey.json- First reported
- Jul 15, 2025 13:58 UTC
- Last reported
- Jul 15, 2025 13:58 UTC
- Catalog updated
- Oct 08, 2026 06:16 UTC
- Record ID
8c35c906dd5d8bb34c86e683481929ba247e34aa88a9cc28fe4ced17ab5462a0
Source family labels
Tags
Published indicators
Network indicators are visibly defanged. This page does not make them clickable or send them to another service.
No validated file hashes or network indicators are stored for this record.
Source observations
Research references
This record contains metadata and attribution only. It does not host, download, unpack, render, or execute malware samples.