Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    31/10/2024, 20:06

General

  • Target

    2136-27-0x0000000000D90000-0x000000000162D000-memory.exe

  • Size

    8.6MB

  • MD5

    8c245bde041ad27bea94dd8802f8ffb3

  • SHA1

    bd32c89e028c9dba8184cc18a482071178f5189f

  • SHA256

    5dd9bc1e91b645a9640db70f9efb7c78633a1a9e278877055b6188c03018f4ce

  • SHA512

    7b7b51e897aef2478c9f7c4a8db65d8fe31cd7930f8397b339bb42e5dd95e02fb52cb97fd71a48fdb28d269d316bb03761bb895c0facbd7d11a20c0a53a46469

  • SSDEEP

    98304:laDOeDk2Daj37160J318LB5YRVsQvS28CZt8FjUF4jhBZtmhjjf8gRP:l8DM1sLjsvvP8pA4dBHmh38

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family
  • Themida packer 1 IoCs

    Detects Themida, an advanced Windows software protection system.

Processes

  • C:\Users\Admin\AppData\Local\Temp\2136-27-0x0000000000D90000-0x000000000162D000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2136-27-0x0000000000D90000-0x000000000162D000-memory.exe"
    1⤵
      PID:2144

    Network

          MITRE ATT&CK Matrix

          Replay Monitor

          Loading Replay Monitor...

          Downloads

          • memory/2144-0-0x0000000000D90000-0x000000000162D000-memory.dmp

            Filesize

            8.6MB

          • memory/2144-1-0x0000000000D90000-0x000000000162D000-memory.dmp

            Filesize

            8.6MB