Analysis

  • max time kernel
    119s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    18/11/2024, 13:48

General

  • Target

    2316-0-0x00000000000A0000-0x0000000000569000-memory.exe

  • Size

    4.8MB

  • MD5

    7f225b4988c6843f6009cff6306aa30c

  • SHA1

    ec44960c6542b1e8f7955bd5b4d3e402d365af2c

  • SHA256

    0e35c9557015885469b5f9f15a5d30b3df0ad0d7fefb16a111806643488d1f9a

  • SHA512

    8fa7f8aecfc65e9ff64b5ae061e275720eabe59091e869b38ed532e2dc4b327d207b0000e31b99f304bbb248bfbaceafc6fca168ce02b02d451d5c3ef6c97078

  • SSDEEP

    6144:OrmE1fXyDNwKHkppHiQvw/Lk48sHNEWYG:OtoNwhpHw/NNX

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2316-0-0x00000000000A0000-0x0000000000569000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2316-0-0x00000000000A0000-0x0000000000569000-memory.exe"
    1⤵
      PID:2036

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2036-0-0x00000000000A0000-0x0000000000569000-memory.dmp

      Filesize

      4.8MB