Analysis
-
max time kernel
94s -
max time network
141s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-12-2024 08:14
General
-
Target
2400-3-0x0000000000BD0000-0x0000000000EF9000-memory.exe
-
Size
3.2MB
-
MD5
4688dc85154f87abd7b433521d48b39d
-
SHA1
7925deb9c9de87d82ac550d35b6b151809572227
-
SHA256
8cd6459b29ec30fe4bb69da9f9a0a704eb9980a1f80ab2c5d57f82e880e2d226
-
SHA512
ce419dac67153cc4dc959e825be3daef8a404d9495a34f673b4a16a0ed7879224d764a23d79a8bba779026043ecb686780abf0d47e2a6d78cd9bbd2fb6621086
-
SSDEEP
49152:3a7Y56YA1SvXnLqO67DF+R0SnBL1UkOsRJQ75S+zHAUqr:q7Y56YAQvXnLqO67kiSnnxRJQtS+Zqr
Score
10/10
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain
Signatures
-
Amadey
Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
-
Amadey family
Processes
-
C:\Users\Admin\AppData\Local\Temp\2400-3-0x0000000000BD0000-0x0000000000EF9000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2400-3-0x0000000000BD0000-0x0000000000EF9000-memory.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.2MB
-
Filesize
3.2MB