Analysis

  • max time kernel
    122s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    23-11-2024 10:06

General

  • Target

    3980-32-0x0000000000630000-0x0000000000AEA000-memory.exe

  • Size

    4.7MB

  • MD5

    03d491c4cc6eac50f670ee7390536bd7

  • SHA1

    8631b4039987b412e79310c7179df323a0fef172

  • SHA256

    550d136dae52c0f942116bfd927ee78557fcb5e3e6ad3a790bee7fbe3ffeff5f

  • SHA512

    c826c59be8607b95678173ea58b4eef27b1425c9eea15d7bdb1753c67fbf926d2320516b4f95ed36cca603683defccc7689f96d2c40570b1620c48e2e1ae4573

  • SSDEEP

    98304:9A6Rkyq2eTrxrHRy2++0gqPGY+n9EKGKo6m:9y++01PMn9E76m

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\3980-32-0x0000000000630000-0x0000000000AEA000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3980-32-0x0000000000630000-0x0000000000AEA000-memory.exe"
    1⤵
      PID:2296

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2296-0-0x0000000000630000-0x0000000000AEA000-memory.dmp

      Filesize

      4.7MB