Analysis

  • max time kernel
    121s
  • max time network
    123s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    25-11-2024 13:03

General

  • Target

    3416-35-0x0000000000850000-0x0000000000D08000-memory.exe

  • Size

    4.7MB

  • MD5

    90b23c37e80ee6b2daf05402593071b3

  • SHA1

    ed7b8ceffbe0c4305346bc1f8cc2358ed061cfdd

  • SHA256

    328277241f6893f04c4ed2318144224e5cbf21294edfcadcf9400912d84332a7

  • SHA512

    7ad68906b9974990a3dbff7c8e9708f365f970aa4c9dc9797b467cc81265c18b6faea44ee38177b11fd850f79a1e36f8fee63bd77255e6f801a03c8452b42a21

  • SSDEEP

    98304:eI48iuIuvX50kct3mfQhJVA5/+P+aMrhipNCTd:e2xsVA0WHrhied

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\3416-35-0x0000000000850000-0x0000000000D08000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\3416-35-0x0000000000850000-0x0000000000D08000-memory.exe"
    1⤵
      PID:2412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2412-0-0x0000000000850000-0x0000000000D08000-memory.dmp

      Filesize

      4.7MB