Windows 7 deprecation
Windows 7 will be removed from tria.ge on 2025-03-31
Analysis
-
max time kernel
96s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
arch:x64arch:x86image:win10v2004-20241007-enlocale:en-usos:windows10-2004-x64system -
submitted
27/12/2024, 06:28
Behavioral task
behavioral1
Sample
1164-32-0x0000000000C20000-0x0000000000F37000-memory.exe
Resource
win7-20240903-en
2 signatures
150 seconds
General
-
Target
1164-32-0x0000000000C20000-0x0000000000F37000-memory.exe
-
Size
3.1MB
-
MD5
4288b71dfcf5e0f13aef06a8e9bba13b
-
SHA1
2bb9faebf2b125813d0ecd23e9979cbb23dd7da8
-
SHA256
58c21710ba2d1ec3f80ee2977e2af911ceb1c7d416e977f142f5613e8b533eef
-
SHA512
5a9ebd7275872c4a5fc7d61a4d5e968084b50ed5ef83789606a25389cbb8823f9fb27075e2efebc8b1ed2da98177c25ffdc6c6fbb06aa51d58be6b5fa869eeed
-
SSDEEP
98304:ylKrBtXeMmyBANeuFlrElYCcjw2bKrrI1Z:yFjwiKrrI1
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain