Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    3740-3-0x0000000000690000-0x0000000000B62000-memory.dmp

  • Size

    4.8MB

  • Sample

    240519-x7e85aeb2x

  • MD5

    22acb40f17e6fa7d81656989a7440806

  • SHA1

    64a2bed3d6eb7adc7163ee688d5f8069f7a3f38b

  • SHA256

    2855485d4ee0c8c80e826d543da988aa651d44ec50befc98f4a42acc5f13230c

  • SHA512

    e09bbf28cf2056b78ed09a4ae9e0cd7a8fc514c310117fda088cf7a0ff0529bbe76776bdee8a185e7aced6d712e027ce07f87e1ede643c63570b2686a7d60e4f

  • SSDEEP

    98304:nO9PqnrR3ZJq8EOI4kX6GLWnWczeNZn1VOf7:n1EOI4jpebTK

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.20

Botnet

c767c0

C2

http://5.42.96.7

Attributes
  • install_dir

    7af68cdb52

  • install_file

    axplons.exe

  • strings_key

    e2ce58e78f631ed97d01fe7b70e85d5e

  • url_paths

    /zamo7h/index.php

rc4.plain

Targets

    • Target

      3740-3-0x0000000000690000-0x0000000000B62000-memory.dmp

    • Size

      4.8MB

    • MD5

      22acb40f17e6fa7d81656989a7440806

    • SHA1

      64a2bed3d6eb7adc7163ee688d5f8069f7a3f38b

    • SHA256

      2855485d4ee0c8c80e826d543da988aa651d44ec50befc98f4a42acc5f13230c

    • SHA512

      e09bbf28cf2056b78ed09a4ae9e0cd7a8fc514c310117fda088cf7a0ff0529bbe76776bdee8a185e7aced6d712e027ce07f87e1ede643c63570b2686a7d60e4f

    • SSDEEP

      98304:nO9PqnrR3ZJq8EOI4kX6GLWnWczeNZn1VOf7:n1EOI4jpebTK

    Score
    10/10
    • Amadey

      Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

MITRE ATT&CK Matrix

Tasks