Analysis

  • max time kernel
    94s
  • max time network
    143s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    12-12-2024 14:13

General

  • Target

    2224-0-0x00000000004A0000-0x00000000007AE000-memory.exe

  • Size

    3.1MB

  • MD5

    b65fbaef90a62a888c2c7866c33917f7

  • SHA1

    44568e3b3787c54e3b2839318e6cd182b047f7e6

  • SHA256

    6578249dc152906783654ec500443cc309b70ef3962b61aa8555d1a782e9a6e9

  • SHA512

    f747ef8f6a3c31d8b7db07e2091f9afb3967cc9ab7f5f46773f1f5321c8e000426c1a2cd9c3f74291b1d162204095212a78d1d5561f6e77197af3bbdcd05251c

  • SSDEEP

    1536:tAeFM1gU3wcatz0U43V92isFnr6vPWoO9Y8y+:tAb1StPIVUior6vPW/Y8y

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2224-0-0x00000000004A0000-0x00000000007AE000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2224-0-0x00000000004A0000-0x00000000007AE000-memory.exe"
    1⤵
      PID:3372

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3372-0-0x00000000004A0000-0x00000000007AE000-memory.dmp

      Filesize

      3.1MB

    • memory/3372-1-0x00000000004A0000-0x00000000007AE000-memory.dmp

      Filesize

      3.1MB