Analysis

  • max time kernel
    150s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    22/11/2024, 17:04

General

  • Target

    1680-0-0x00000000003E0000-0x0000000000884000-memory.exe

  • Size

    4.6MB

  • MD5

    b92509e96c0b3d0494adfa4bb47ab27e

  • SHA1

    04694aa480e77856b60c9ed552d49eb18724c23e

  • SHA256

    808c188d90c1c263f9a94ab74cd37f5a37a2a01d75e83b7fe362921deb66ffa8

  • SHA512

    240eb0ab1acdc047318fde81574dfea54cc7e003fe8c59a8166c750c2f0079f690d84b9d99215e4412b88321247ec562d1896785f2dc582f1de21d8a86072cfb

  • SSDEEP

    3072:31PwGHBpmb+Qh75fZQEUtHMiwKP0b/vJMFC9gwNxLmDqStHoDq5J+xNL46mgr:31PwGHkQsiFP0b/SFGqjteq5JA4

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\1680-0-0x00000000003E0000-0x0000000000884000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1680-0-0x00000000003E0000-0x0000000000884000-memory.exe"
    1⤵
      PID:3080

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3080-0-0x00000000003E0000-0x0000000000884000-memory.dmp

      Filesize

      4.6MB

    • memory/3080-1-0x00000000003E0000-0x0000000000884000-memory.dmp

      Filesize

      4.6MB