Analysis
-
max time kernel
94s -
max time network
144s -
platform
windows10-2004_x64 -
resource
win10v2004-20241007-en -
resource tags
-
submitted
27-12-2024 07:48
General
-
Target
2676-0-0x00000000013A0000-0x00000000016C5000-memory.exe
-
Size
3.1MB
-
MD5
3a2956ad40436b57ac27999adebb63a7
-
SHA1
ad72c1a84864a970a509547ca7e3ac50806123c4
-
SHA256
88c8faba8ede163150060498fce03e20d65412ba4373e4a30e06ba7ff7d2b415
-
SHA512
34b20d430344438c2ba634de51ede6e0b8501bb6b9c9d205dd6ef159accc06f7f6f500e009614b8b4a95575844649f2859d3fc0cbb5830588912a6a4754b0433
-
SSDEEP
24576:C3aNNDUdaOCm6FFJM4bexAhSqmscr4s4oy:9NRUlCm6u2exAhSqmXdk
Score
10/10
Malware Config
Signatures
-
Amadey
Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.
-
Amadey family
Processes
-
C:\Users\Admin\AppData\Local\Temp\2676-0-0x00000000013A0000-0x00000000016C5000-memory.exe"C:\Users\Admin\AppData\Local\Temp\2676-0-0x00000000013A0000-0x00000000016C5000-memory.exe"1⤵
Network
MITRE ATT&CK Matrix
Replay Monitor
Loading Replay Monitor...
Downloads
-
Filesize
3.1MB
-
Filesize
3.1MB