Analysis
-
max time kernel
93s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
10-12-2024 15:35
General
-
Target
2744-69-0x0000000006A00000-0x0000000007283000-memory.exe
-
Size
8.5MB
-
MD5
132f3fa63619e033f0d4a3edef5b2881
-
SHA1
03245bef60d805c52d9ba0ae7b4d0298977fa10f
-
SHA256
61096a697287d66ad1e69cec5453d4e33990e23a27128c439a9d1db624db35dc
-
SHA512
a2803e3b71bc1137d3dab74ff4e609d8a12e2499b234ee80a4ee4f72c5fa181e8f7d205e08d034b72b80bc04c39208b535239ebd850d51cb0481a67fda5ee1c7
-
SSDEEP
98304:ot1e0paAJJZDlLWJQgJzt6d3Bzt6It1e0pa4JJZDlLWJQ3Bzt6RZDlLWJm:o5gRt6d3Jt6IZ3Jt6P
Score
10/10
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain
Signatures
-
Amadey
Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
-
Amadey family
Processes
-
C:\Users\Admin\AppData\Local\Temp\2744-69-0x0000000006A00000-0x0000000007283000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2744-69-0x0000000006A00000-0x0000000007283000-memory.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
3.1MB