Loader Insight Agency - We Emulate, They Capitulate!

Payload Details

First Seen	2026-03-09 (Login for timestamps)
Last Seen	2026-03-27
SHA256	e0e2d1cd33fef3594051992c8b37bf1cfa94c642594caf1d54a4026396d14632
Filetype	PE32 executable (GUI) Intel 80386 Mono/.Net assembly, for MS Windows, 3 sections
Size	190,464 bytes
Distributed By	Vidar (Login) Amadey (Login)
Countries	Login for country information
UnpacMe ID	99ef67e7-6f63-4276-885b-73157fea72b3
UnpacMe Detections	MALWARE:AmadeyTYPE:DOWNLOADERRULE:AmadeyCONFIG:Amadey
UnpacMe Community	RULE:win_amadey_auto
Sandbox Detections	VidarAmadey
Malcat Kesakode	One of the process dumps is 98% similar to VidarVidar 98%One of the process dumps is 100% similar to AmadeyAmadey 100%One of the process dumps is 100% similar to BruteresBruteres 100%
Download	Login

Monitored Sandbox Execution

Login required

Non-Monitored Sandbox Execution

Login required

Tasks of Origin (114)

First Seen (UTC)	Last Seen (UTC)	Family	Botnet	Task Data
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-27	2026-03-27	vidar	Login	http://192.177.26.196/files/amka/random.exe
2026-03-25	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-25	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-27	vidar	Login	http://158.94.208.168/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://185.222.160.157/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-22	2026-03-22	vidar	Login	http://5.252.21.239/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-20	2026-03-21	amadey	Login	http://158.94.208.7/amka/random.exe
2026-03-19	2026-03-19	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-13	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-12	2026-03-21	vidar	Login	http://158.94.208.7/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-12	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe
2026-03-06	2026-03-10	vidar	Login	http://158.94.211.222/amka/random.exe