Analysis

  • max time kernel
    120s
  • max time network
    131s
  • platform
    windows7_x64
  • resource
    win7-20240221-en
  • resource tags

    arch:x64arch:x86image:win7-20240221-enlocale:en-usos:windows7-x64system
  • submitted
    07/03/2024, 15:26

General

  • Target

    1400-2-0x0000000000220000-0x00000000006C3000-memory.exe

  • Size

    4.6MB

  • MD5

    cc4370260240df96064a45cdbe51f985

  • SHA1

    f36b2682e49586a74ddad3326ecf0c3901a8fd69

  • SHA256

    cb0ba68dcb9b21e537a1ddb5fd3f5ca6a93278e133ef904be00269725cb36fdf

  • SHA512

    e1fa0276c1d98f7ebdc6bdfcc8b49b976b50fee7982eacf2b80769412a730a336af3ff22e6a7f82145079a3b2f2032872cc3b624d10172b4afb8dbfb2ddf218a

  • SSDEEP

    98304:Dtw4Vgk2ADybvz0/PZjQ2e7Tu/qrwFdOZl2tk7Q:DSAPZjQrNwFQZlok7Q

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1400-2-0x0000000000220000-0x00000000006C3000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1400-2-0x0000000000220000-0x00000000006C3000-memory.exe"
    1⤵
      PID:2360

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2360-0-0x0000000000220000-0x00000000006C3000-memory.dmp

            Filesize

            4.6MB