Overview

overview

10

Static

static

10

2580-3-0x0...ry.exe

windows7-x64

10

2580-3-0x0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/11/2024, 22:46

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe

  • Size

    4.8MB

  • MD5

    7da076ba4077d513a9942fec3fcc4525

  • SHA1

    c884702209b0908e29d4d505961bf2b49d6899f4

  • SHA256

    1c48a51cac4f031e4eac61008b4d9974fd5c58c145969dfc910c56d262f050d9

  • SHA512

    a610a2861ce3b0d86e56a9d5976d8315cc7a194cefd536130cad1a5f84ee5ea468a3b45e810bd443018c83f2e5c79f1ae2a958382a755e156d439a3fa3923072

  • SSDEEP

    98304:QGUEqmQoOkFEwtBCPNRNCp6zt4uledqQLSV0Y1MoRTH/Mx:QMo4wRQ7Y1MmTHE

Score
10/10
amadeytrojan

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey
  • Amadey family
    amadey

Processes

  • C:\Users\Admin\AppData\Local\Temp\2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe"
    1⤵
      PID:2472

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2472-0-0x0000000000CD0000-0x0000000001195000-memory.dmp

      Filesize

      4.8MB

      Download