Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    0x000700000001afca-26.dat

  • Size

    322KB

  • Sample

    230827-zyqdvadc34

  • MD5

    d638d4fb99094a3bf69b4ded992fa7d8

  • SHA1

    74b87cc929fa0298f681b5fc94e5ba4a2f916155

  • SHA256

    59bdce46810a146931d6c37a7c9426238446957002641c9ed0dbfb9ea85da263

  • SHA512

    10d0a06fb89667e2405e55f2f9c2f0c19786a42522c2faf0fd379d260930ac54bf3d9deb312a6674496c7b49ce69e2a2aaabb9ba1a2d10fee7828d370d85b27b

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      0x000700000001afca-26.dat

    • Size

      322KB

    • MD5

      d638d4fb99094a3bf69b4ded992fa7d8

    • SHA1

      74b87cc929fa0298f681b5fc94e5ba4a2f916155

    • SHA256

      59bdce46810a146931d6c37a7c9426238446957002641c9ed0dbfb9ea85da263

    • SHA512

      10d0a06fb89667e2405e55f2f9c2f0c19786a42522c2faf0fd379d260930ac54bf3d9deb312a6674496c7b49ce69e2a2aaabb9ba1a2d10fee7828d370d85b27b

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks