Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

4280-35-0x...ry.exe

windows7-x64

10

4280-35-0x...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    05/12/2024, 18:15 UTC

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    4280-35-0x0000000000F20000-0x0000000001243000-memory.exe

  • Size

    3.1MB

  • MD5

    b0a81e4e4cfaf0a24b383611d740a1d2

  • SHA1

    75856f8423f0880404b61e302f415a173efd7489

  • SHA256

    a1ac3603e23b332e569bcffbcdb6a582f1bb06330f400cc3127b91112cad4890

  • SHA512

    a07185e6484fde9675ca28927ec3cb11ab7e905798075cbb449d7f789da3321d67a372730e850b28a97032a0e021fc502206168e986ffdeed82d5aae914a2b3b

  • SSDEEP

    49152:IYxXfR/npmxCa3l4IX3taptH9AtgE7Mv4L0Tm9Gzk:xxXfR/nQEaeIXd6H9igEoAL0T5zk

Score
10/10
amadey9c9aa5trojan

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain
1
006700e5a2ab05704bbb0c589b88924d

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey
  • Amadey family
    amadey

Processes

  • C:\Users\Admin\AppData\Local\Temp\4280-35-0x0000000000F20000-0x0000000001243000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\4280-35-0x0000000000F20000-0x0000000001243000-memory.exe"
    1⤵
      PID:2412

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2412-0-0x0000000000F20000-0x0000000001243000-memory.dmp

      Filesize

      3.1MB

      Download

    We care about your privacy.

    This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.