Overview

overview

10

Static

static

10

2604-3-0x0...ry.exe

windows7-x64

10

2604-3-0x0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    94s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    26-12-2024 18:57

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2604-3-0x0000000000820000-0x0000000000CDF000-memory.exe

  • Size

    4.7MB

  • MD5

    6802ac438088524e9656355875b8ef5d

  • SHA1

    163a5afaf79f15870739434abe85431de96da8a4

  • SHA256

    4d487438aabf8271679a5a96893be53bcb2e49e6593bb141b826a566bf87378a

  • SHA512

    601a85e24360134028db18954562f2f7c57e0cee9be8c110c0509ee565b7986efde8db2af8a62e1708810ef6b4b00c9eb3eed98a3a30f66a50e3d77553b150e1

  • SSDEEP

    98304:J8L7RdfUuoWpdPYvxvsP93oT73keQxhcdm7MDgmd/cVfD6S0yYqGMUpfE:Jt9kKVbap6S0yY9pf

Score
10/10
amadeytrojan

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey
  • Amadey family
    amadey

Processes

  • C:\Users\Admin\AppData\Local\Temp\2604-3-0x0000000000820000-0x0000000000CDF000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2604-3-0x0000000000820000-0x0000000000CDF000-memory.exe"
    1⤵
      PID:1100

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1100-0-0x0000000000820000-0x0000000000CDF000-memory.dmp

      Filesize

      4.7MB

      Download

    • memory/1100-1-0x0000000000820000-0x0000000000CDF000-memory.dmp

      Filesize

      4.7MB

      Download