Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x0006000000018b81-42.dat

  • Size

    321KB

  • Sample

    230827-e8sxhahd31

  • MD5

    354c01985e0b84256652e8818dc6de37

  • SHA1

    3ad3c30ab1fc893133347c0f056c1acbd98281c9

  • SHA256

    1e1ddf6d415c4424c1a4bfd748334209c77eb8b0e427ad584d1e4d3d605ba19f

  • SHA512

    0b46f48e5a12c53f69003a8ad080aa14136b41a0b9d010b3b6f8d33613f239a3b56c09e40b8c32359c163a4b500aa6a46d6053bd295eaed5f85586e43a68842d

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x0006000000018b81-42.dat

    • Size

      321KB

    • MD5

      354c01985e0b84256652e8818dc6de37

    • SHA1

      3ad3c30ab1fc893133347c0f056c1acbd98281c9

    • SHA256

      1e1ddf6d415c4424c1a4bfd748334209c77eb8b0e427ad584d1e4d3d605ba19f

    • SHA512

      0b46f48e5a12c53f69003a8ad080aa14136b41a0b9d010b3b6f8d33613f239a3b56c09e40b8c32359c163a4b500aa6a46d6053bd295eaed5f85586e43a68842d

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks