Analysis

  • max time kernel
    91s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/11/2024, 22:46

General

  • Target

    2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe

  • Size

    4.8MB

  • MD5

    7da076ba4077d513a9942fec3fcc4525

  • SHA1

    c884702209b0908e29d4d505961bf2b49d6899f4

  • SHA256

    1c48a51cac4f031e4eac61008b4d9974fd5c58c145969dfc910c56d262f050d9

  • SHA512

    a610a2861ce3b0d86e56a9d5976d8315cc7a194cefd536130cad1a5f84ee5ea468a3b45e810bd443018c83f2e5c79f1ae2a958382a755e156d439a3fa3923072

  • SSDEEP

    98304:QGUEqmQoOkFEwtBCPNRNCp6zt4uledqQLSV0Y1MoRTH/Mx:QMo4wRQ7Y1MmTHE

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2580-3-0x0000000000CD0000-0x0000000001195000-memory.exe"
    1⤵
      PID:1972

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1972-0-0x0000000000CD0000-0x0000000001195000-memory.dmp

      Filesize

      4.8MB

    • memory/1972-1-0x0000000000CD0000-0x0000000001195000-memory.dmp

      Filesize

      4.8MB