Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Overview

overview

10

Static

static

10

2084-0-0x0...ry.exe

windows7-x64

10

2084-0-0x0...ry.exe

windows10-2004-x64

10

Analysis

  • max time kernel
    149s
  • max time network
    150s
  • platform
    windows10-2004_x64
  • resource
    win10v2004-20241007-en
  • resource tags

    arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system
  • submitted
    27/12/2024, 02:03

Sharing

Copy URL
Twitter E-mail
Report Analysis Logs

General

  • Target

    2084-0-0x0000000000880000-0x0000000000D33000-memory.exe

  • Size

    4.7MB

  • MD5

    0a776f0215602cf2bb8681e96a091a6c

  • SHA1

    d309f27cf4a9c79b04e646b4fc00fa3f359a2ee1

  • SHA256

    13502033895635fdf812fec3c9483fe69c469fbf9d9336c5d4510133aa35327e

  • SHA512

    1d227466292525bef065ab4d8a4e448c781c47a0c5d423a7509d31fecd720f79a595c580c9d0602751152627a7a35315faae70406cd5a6f63dc8b324747dc969

  • SSDEEP

    6144:11IuPFaatlxVh39m4sl4iPN6CKNWjjia:AuPsaRVhcl4sj

Score
10/10
amadeytrojan

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

    trojanamadey
  • Amadey family
    amadey

Processes

  • C:\Users\Admin\AppData\Local\Temp\2084-0-0x0000000000880000-0x0000000000D33000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2084-0-0x0000000000880000-0x0000000000D33000-memory.exe"
    1⤵
      PID:3204

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/3204-0-0x0000000000880000-0x0000000000D33000-memory.dmp

      Filesize

      4.7MB

      Download

    • memory/3204-1-0x0000000000880000-0x0000000000D33000-memory.dmp

      Filesize

      4.7MB

      Download