Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000015c84-94.dat

  • Size

    229KB

  • Sample

    230731-1p2aescd9z

  • MD5

    2130ff873dd3acc53fe26630616c5f5f

  • SHA1

    ee1b97f2fdeb58a6d535dd22f135408dbd73d815

  • SHA256

    c0eb8d4449aeffaaea9ed0965e903924eabab6e94540fe9a53011d7bdc0a6f48

  • SHA512

    9e957a99e4fc0a374de5cd3a1b6a01da8bc74048a6f5bef08262c5593f99a69a7c5cecefe607cf3956399ce8fb6f5217aba818059bae70f0c3998fed9ffab8dd

  • SSDEEP

    3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.86

C2

77.91.68.61/rock/index.php

Targets

    • Target

      0x0006000000015c84-94.dat

    • Size

      229KB

    • MD5

      2130ff873dd3acc53fe26630616c5f5f

    • SHA1

      ee1b97f2fdeb58a6d535dd22f135408dbd73d815

    • SHA256

      c0eb8d4449aeffaaea9ed0965e903924eabab6e94540fe9a53011d7bdc0a6f48

    • SHA512

      9e957a99e4fc0a374de5cd3a1b6a01da8bc74048a6f5bef08262c5593f99a69a7c5cecefe607cf3956399ce8fb6f5217aba818059bae70f0c3998fed9ffab8dd

    • SSDEEP

      3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks