Analysis

  • max time kernel
    153s
  • max time network
    158s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20240226-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20240226-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27-03-2024 07:12

General

  • Target

    1368-2-0x0000000000ED0000-0x0000000001383000-memory.exe

  • Size

    4.7MB

  • MD5

    ef09267ce9039886638d9344f5610800

  • SHA1

    29250a34dc21050346d3094f41881773d18a417f

  • SHA256

    074fdaf1999e29496e62013ffd7055ed7a3aef53159c993dd948e6480d36a7d0

  • SHA512

    7ef8ac1c4fd93d34fcbbcdcb0457f6b0ead8d2b46f9bc5f90b18ae8c81c5e450fae3308481afbaf453b0a88ba8e1f5ba6271dc8808ba0e23d40e5d3cfa401501

  • SSDEEP

    98304:5JLj9xBmpD+XviofCTLgsHoG0zjwe3YuCGJPexEPdujK:5OWs8w4G2F

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

Processes

  • C:\Users\Admin\AppData\Local\Temp\1368-2-0x0000000000ED0000-0x0000000001383000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1368-2-0x0000000000ED0000-0x0000000001383000-memory.exe"
    1⤵
      PID:2756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2756-0-0x0000000000ED0000-0x0000000001383000-memory.dmp
      Filesize

      4.7MB

    • memory/2756-1-0x0000000000ED0000-0x0000000001383000-memory.dmp
      Filesize

      4.7MB