Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

a.exe

windows7-x64

10

a.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    a.exe.zip

  • Size

    101KB

  • Sample

    220908-wztwwafca6

  • MD5

    e09947de9614ed147cdd8448ca9916b1

  • SHA1

    0f64a14aae6132b0c0950eae84f83cb701fd916e

  • SHA256

    aea793646042cec0c7c641247da6ed6623d5547da079db4026e07e7f705426b2

  • SHA512

    33ce825d11f77accff80a3cf11a70716d1519d4b8704a57c2bb8a2ba2579e877350bc3c85f0a7b69251b657a2e43b39e67f24d50d944b84983cb51840d3bdc6f

  • SSDEEP

    3072:MU5gp+X3Xi+cIgaYHpID7eo1f8hVQxRRJBYnWKM:MU5FnfcIgaACeiUTQxjbYnJM

Score
10/10
amadeycollectionspywarestealertrojan

Malware Config

Targets

    • Target

      a.exe

    • Size

      217KB

    • MD5

      6e60a3b3f0129a17a42ac486043705a6

    • SHA1

      8afb7453c38fda8ab75b9ddb1ad8af2023feb788

    • SHA256

      fbbac58730ce0b0785ed036b9512c2329599b3c5bbf4b30a597660364f2cd560

    • SHA512

      07f0d99c31b67ce99b8ffae6b6c2c010d416ae8740a8e8ad06b9755032e9c37314d0f4b4a14605599f6e4622992da1f74d933bedadc629846805467182acf187

    • SSDEEP

      6144:lc1fY938g3CQ+56G9f1v6Sz7/zhZ5uCQckWZTOMw:l2e+km1v6G/zluCQcdw

    Score
    10/10
    amadeycollectionspywarestealertrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Detect Amadey credential stealer module

    • Blocklisted process makes network request

    • Downloads MZ/PE file

    • Executes dropped EXE

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Loads dropped DLL

    • Reads local data of messenger clients

      Infostealers often target stored data of messaging applications, which can include saved credentials and account information.

      spywarestealer

    • Accesses Microsoft Outlook profiles

      collection
    behavioral1behavioral2

MITRE ATT&CK Enterprise v6

Tasks