Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

Analysis

  • max time kernel
    121s
  • max time network
    121s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    27/12/2024, 04:02

General

  • Target

    2372-0-0x0000000000220000-0x00000000006BF000-memory.exe

  • Size

    4.6MB

  • MD5

    4abd241f7513368f4b1916a21a368bc9

  • SHA1

    2eec5bded3229edd5183ddfa5dac1854f93dc4a1

  • SHA256

    8e56adfa422e681f4ad9775d6208ff292f2048a9cd71d7c4b5c937babff3f065

  • SHA512

    3ead541ba55624bbce2f210fbf6ec5241921d395f45b7b85d5e01149d993b4e8bed58b20bca491d3a356c9b4397e9c0e66b6f454f92f89dc4d5093f2da09ab33

  • SSDEEP

    6144:/19LSrVkkYvdiyhXqyOgDcVSQujRVtjQ:r4VpYliyEgDVV

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\2372-0-0x0000000000220000-0x00000000006BF000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\2372-0-0x0000000000220000-0x00000000006BF000-memory.exe"
    1⤵
      PID:2128

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/2128-0-0x0000000000220000-0x00000000006BF000-memory.dmp

      Filesize

      4.6MB