Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    l5952554.exe

  • Size

    319KB

  • Sample

    230828-e9k82sfg88

  • MD5

    5a6e758df64ee5553fdb304f6f97dfc1

  • SHA1

    24f5e539dc1293faf20a69fcb9d5fcedc76e3062

  • SHA256

    71eddfd20f707e09cc3d28c903e9a5781024cd0ba1ff54ad17f2efe496c25c7d

  • SHA512

    67831462985d7824bb5701dc466382b002e4e891a1610bb8aa1d2a1d5a3091447c3b9dc0d2525c21d6a2c634b59b7eb8860742d05ff3dc24c6fa6118874125dc

  • SSDEEP

    6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

Score
10/10

Malware Config

Extracted

Family

amadey

Version

3.87

C2

77.91.68.18/nice/index.php

Targets

    • Target

      l5952554.exe

    • Size

      319KB

    • MD5

      5a6e758df64ee5553fdb304f6f97dfc1

    • SHA1

      24f5e539dc1293faf20a69fcb9d5fcedc76e3062

    • SHA256

      71eddfd20f707e09cc3d28c903e9a5781024cd0ba1ff54ad17f2efe496c25c7d

    • SHA512

      67831462985d7824bb5701dc466382b002e4e891a1610bb8aa1d2a1d5a3091447c3b9dc0d2525c21d6a2c634b59b7eb8860742d05ff3dc24c6fa6118874125dc

    • SSDEEP

      6144:SR9eh569+UR6P3zIwkp4p2k/DPaZHwc3eoe6u17MgAOIMs8Bq:Sfm5BB7kpi2k/ae6u17pa8Bq

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    • Executes dropped EXE

    • Loads dropped DLL

MITRE ATT&CK Enterprise v15

Tasks