Analysis

  • max time kernel
    148s
  • max time network
    151s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    02-12-2024 10:02

General

  • Target

    2232-34-0x0000000000B60000-0x0000000001005000-memory.exe

  • Size

    4.6MB

  • MD5

    51234fce64395322307386e380c63e0b

  • SHA1

    8a3d48a5b9a5cb3507c6e7a0c1b0999c076ec95c

  • SHA256

    0594e53b10a41705bc08ddfdfe8c2518750e507da04de067cd8a2af1fc06f5db

  • SHA512

    bcac515604f9aa881d42f486b1288717be9a2f92f511d98ac6c5a60137ab7d0c91007cb8c5d7a5c3aa1faaccef453525334ec3595d865adc04ba09cbb9237b6c

  • SSDEEP

    98304:5LLpdyrKTVYB9FMhdMCm14wghVCjVv/M85ltoHb6:5CghsjpDzto7

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2232-34-0x0000000000B60000-0x0000000001005000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2232-34-0x0000000000B60000-0x0000000001005000-memory.exe"
    1⤵
      PID:1652

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1652-0-0x0000000000B60000-0x0000000001005000-memory.dmp

      Filesize

      4.6MB

    • memory/1652-1-0x0000000000B60000-0x0000000001005000-memory.dmp

      Filesize

      4.6MB