Analysis

  • max time kernel
    95s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    19/11/2024, 16:02

General

  • Target

    2872-0-0x0000000000920000-0x0000000000DB1000-memory.exe

  • Size

    4.6MB

  • MD5

    5f70fad6204feb94ff0e4244e6ca7334

  • SHA1

    4dcf58c353055f6bbe4b05613900cb99dc94f102

  • SHA256

    2801970f38c02c0ab16b23976932f07d80e52779509850a55cf7b95af31e9601

  • SHA512

    4cb58becba7f4fc1a5173c8114f372ef5b2156e7372aaa4c7fc521d445e088a7eccad686a51bcb09ce7219a371e4731cdf4c58c5a4f2a9bc9cd984bcdbc7977e

  • SSDEEP

    24576:eWC2lv8+8m9x5iRHdyCp/cqCtnT8JbhUn9Oy5:Y2V80x+HNEqCOQns

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2872-0-0x0000000000920000-0x0000000000DB1000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2872-0-0x0000000000920000-0x0000000000DB1000-memory.exe"
    1⤵
      PID:4500

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/4500-0-0x0000000000920000-0x0000000000DB1000-memory.dmp

      Filesize

      4.6MB

    • memory/4500-1-0x0000000000920000-0x0000000000DB1000-memory.dmp

      Filesize

      4.6MB