Overview

overview

10

Static

static

10

2100-599-0...ry.exe

windows7-x64

10

2100-599-0...ry.exe

windows10-2004-x64

1

Analysis

  • max time kernel
    119s
  • max time network
    120s
  • platform
    windows7_x64
  • resource
    win7-20241023-en
  • resource tags

    arch:x64arch:x86image:win7-20241023-enlocale:en-usos:windows7-x64system
  • submitted
    16-12-2024 14:30

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2100-599-0x0000000006790000-0x0000000006C1B000-memory.exe

  • Size

    4.5MB

  • MD5

    757628f414ad0ad500260b65e7be9a77

  • SHA1

    74554752c81f73f545c3aaffbaa7a8f35c43906a

  • SHA256

    417b64e25ed936cabc94ec6ccf7382dd6fa401800a5883585204fdcba2558939

  • SHA512

    bba8361b9653584fde69d333f23e6309e7592146f05c5585bc09a78747b2756930af87b2d9648e0d967d80374539a00e4daf24fa393ec04efd91d47f38e80de5

  • SSDEEP

    24576:aPJrj36HuSMmdquhUeBcufjU5aYFMa4Xpyr0hcqQ9pmyVURtGZiPdM6aAY+DtgUB:cKtrHBcWjg1MlUFAuo2Ij

Score
10/10
amadeytrojan

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey
  • Amadey family
    amadey

Processes

  • C:\Users\Admin\AppData\Local\Temp\2100-599-0x0000000006790000-0x0000000006C1B000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2100-599-0x0000000006790000-0x0000000006C1B000-memory.exe"
    1⤵
      PID:2556

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2556-0-0x00000000000D0000-0x0000000000D46000-memory.dmp

      Filesize

      12.5MB

      Download