Analysis

  • max time kernel
    149s
  • max time network
    152s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    18/11/2024, 14:20

General

  • Target

    1720-0-0x0000000000CC0000-0x0000000001194000-memory.exe

  • Size

    4.8MB

  • MD5

    1df4affadcbaf882c3ec108a83a8e516

  • SHA1

    000056b5c4b900a2f55e70322618dc99a1c18f15

  • SHA256

    97c5ca6b808cdcef29a218d5f71d5d02fd0bd56355849150c02b36bced1f2637

  • SHA512

    c54e30e2e82fee3713378ed466064f6229e107fc62ea51b9ecae5d02b0e3002cddea2cbfaaa9bfd548f92132d26f7d2a4c55b6cd74c301bdd55345a7a0adbcd5

  • SSDEEP

    24576:1QBBDXRmf/9fKRVe5ofyZAJL/Hxaw4tBpdyeDRclTNJt2Q+M6c:QBbRmtfkVe5s7vl477f8R

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\1720-0-0x0000000000CC0000-0x0000000001194000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1720-0-0x0000000000CC0000-0x0000000001194000-memory.exe"
    1⤵
      PID:4748

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4748-0-0x0000000000CC0000-0x0000000001194000-memory.dmp

      Filesize

      4.8MB

    • memory/4748-1-0x0000000000CC0000-0x0000000001194000-memory.dmp

      Filesize

      4.8MB