Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

1796-3-0x0...ry.exe

windows7-x64

10

1796-3-0x0...ry.exe

windows10-2004-x64

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1796-3-0x00000000008A0000-0x0000000000BB9000-memory.dmp

  • Size

    3.1MB

  • MD5

    007d4688c7e78db6aef203154fd639b8

  • SHA1

    8b6ad9b991641cce93928e891be019477226e6ed

  • SHA256

    601e7db87a8442842bcf7c7bdebf09869a593953e684c0974c86264ac8d03490

  • SHA512

    8f382c4839be0ac9794df341700bf7f445b9e408f22235efdf837a0acbb674ea7ef53ff774c0c6da7691b46958a70899cfa7dcbedb713d57940fcd8c646b903c

  • SSDEEP

    49152:vGAdxJvfOQwHexeVK+ilBGgOehC91PpTuY:+AdxJvfOQw+uK+iHGVehERY

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain
1
006700e5a2ab05704bbb0c589b88924d

Signatures

  • Amadey family
    amadey
  • Unsigned PE 1 IoCs

    Checks for missing Authenticode signature.

Files

  • 1796-3-0x00000000008A0000-0x0000000000BB9000-memory.dmp
    .exe windows:6 windows x86 arch:x86


    Headers

    Sections

We care about your privacy.

This website stores cookies on your computer. These cookies are used to improve your website experience and provide more personalized services to you, both on this website and through other media. To find out more about the cookies we use, see our Privacy Policy.