Analysis

  • max time kernel
    120s
  • max time network
    122s
  • platform
    windows7_x64
  • resource
    win7-20240729-en
  • resource tags

    arch:x64arch:x86image:win7-20240729-enlocale:en-usos:windows7-x64system
  • submitted
    12-12-2024 12:44

General

  • Target

    2912-64-0x0000000000A30000-0x0000000000EE3000-memory.exe

  • Size

    4.7MB

  • MD5

    044c889f6c620490cd42ae477847a2d1

  • SHA1

    6557c79ca46e6cbdfcd862391114da89e832de7f

  • SHA256

    daf1e43ea4604c4db5225972295a4d17626239b0bd49dc176370de3cea0be195

  • SHA512

    cb7477837e64ec13798c0a6c3376b223054116c5a14065d193bd026f76545868b2a4a394a7ec4bcb9dee14363af884f9db8c51c97675a9f40a68fef5bdff79d0

  • SSDEEP

    98304:uPOX03pMvo3A0s4ASqxeygDrw8/1CkxklBVs3mgp:u+iw8dCkmBVs3mg

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2912-64-0x0000000000A30000-0x0000000000EE3000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2912-64-0x0000000000A30000-0x0000000000EE3000-memory.exe"
    1⤵
      PID:2640

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2640-0-0x0000000000A30000-0x0000000000EE3000-memory.dmp

      Filesize

      4.7MB