Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4804-35-0x...ry.exe

windows7-x64

1

4804-35-0x...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    4804-35-0x0000000000E60000-0x0000000001327000-memory.dmp

  • Size

    4.8MB

  • MD5

    b5739897c787c945d049203d14ee46ef

  • SHA1

    42b9e412e844e01aa71e90d6b9af7c5fd63e797b

  • SHA256

    5ad08c55ef954ed5534c6182ef67afcbadf70c115fcc80a417256e44052fd3c5

  • SHA512

    2d98252c57c6e80682440a32df81192ec3d287809e21df650ee86a53bb6ad634c6e41fc8db1212e40ba6d11c631ce4d32d05cb4bde052e33f5d09953d310f79c

  • SSDEEP

    98304:7fUktP4bRkP9eikrGF+MRzeJJK45r+i9pxo:77F+M1e5L6

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 4804-35-0x0000000000E60000-0x0000000001327000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections