Analysis

  • max time kernel
    118s
  • max time network
    119s
  • platform
    windows7_x64
  • resource
    win7-20241010-en
  • resource tags

    arch:x64arch:x86image:win7-20241010-enlocale:en-usos:windows7-x64system
  • submitted
    26-12-2024 14:45

General

  • Target

    2232-3-0x0000000000880000-0x0000000000D33000-memory.exe

  • Size

    4.7MB

  • MD5

    0426fa2c7c380d83ae4ae389b4559359

  • SHA1

    d89d30bcb987a55a301315f29727c3b9f78ae2bb

  • SHA256

    894f4e5d94d3728017f427757f89a3d3ef62ec78cab74c13d406bf1cf1f7a9e6

  • SHA512

    8c1c522a332b87727c36e0388979873aa28aec88f89c2d9c411099e168740c454ba40920231bba7e48bcb2242ae8dded5ef44f7e322cd3b4cf89eada4f09012e

  • SSDEEP

    98304:cGUUDYAKBZIpaxmc041lKwOTMOQmm7dD+4J8uquZFSRR:cGAI5m7dC4JTquoR

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2232-3-0x0000000000880000-0x0000000000D33000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2232-3-0x0000000000880000-0x0000000000D33000-memory.exe"
    1⤵
      PID:2084

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2084-0-0x0000000000880000-0x0000000000D33000-memory.dmp

      Filesize

      4.7MB