Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

0x00060000...68.exe

windows7-x64

10

0x00060000...68.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    0x0006000000022de7-68.dat

  • Size

    221KB

  • Sample

    231031-12cslage98

  • MD5

    45972d82be3fe8549527361313f57cdc

  • SHA1

    d7ad6911ee36ee607068242f97fd675a6589f9df

  • SHA256

    510e6877041b5fcb45ff3a56943088ac50a06d0cb1ca7e33d3cfb37b5202ae99

  • SHA512

    7232f30eb93c18d335cfd747e49eaf0d1c1cec3ca40bfc39ee71aca56dcc094b4f087fed88bdcb80396be38fe353fcf05f5c2555f24d7c65007fbbbab933ce60

  • SSDEEP

    6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS

Score
10/10
amadeytrojan

Malware Config

Extracted

Family

amadey

Version

3.89

C2

http://77.91.124.1/theme/index.php

Attributes
  • install_dir

    fefffe8cea

  • install_file

    explothe.exe

  • strings_key

    36a96139c1118a354edf72b1080d4b2f

rc4.plain

Targets

    • Target

      0x0006000000022de7-68.dat

    • Size

      221KB

    • MD5

      45972d82be3fe8549527361313f57cdc

    • SHA1

      d7ad6911ee36ee607068242f97fd675a6589f9df

    • SHA256

      510e6877041b5fcb45ff3a56943088ac50a06d0cb1ca7e33d3cfb37b5202ae99

    • SHA512

      7232f30eb93c18d335cfd747e49eaf0d1c1cec3ca40bfc39ee71aca56dcc094b4f087fed88bdcb80396be38fe353fcf05f5c2555f24d7c65007fbbbab933ce60

    • SSDEEP

      6144:DEPAc72ss5pKL93yMax7pH3F2d1ugMeSWp:DE32xpoaxBFg1ugMeS

    Score
    10/10
    amadeytrojan

    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

      trojanamadey

    • Checks computer location settings

      Looks up country code configured in the registry, likely geofence.

    • Executes dropped EXE

    • Loads dropped DLL

    behavioral1behavioral2

MITRE ATT&CK Enterprise v15

Tasks