Analysis

  • max time kernel
    117s
  • max time network
    118s
  • platform
    windows7_x64
  • resource
    win7-20240903-en
  • resource tags

    arch:x64arch:x86image:win7-20240903-enlocale:en-usos:windows7-x64system
  • submitted
    06/02/2025, 11:19

General

  • Target

    1920-3-0x0000000000A70000-0x0000000000F28000-memory.exe

  • Size

    4.7MB

  • MD5

    dec8a3372658f3bd2230b1561d0ef1f2

  • SHA1

    667fed0d13be47b7d5c8935c24b10a67bbb8b60e

  • SHA256

    58261e98ef20d09f25d6eb1a03c3a0096447e0461b41a1478cba2205c8f52a61

  • SHA512

    e929bc20a2813cee65cb68525b027a3e59fee58c5d893a784a2ce99c2834b04c237a54c2c2c8b75791dbf06d0cc79ee4e8ac1bde94a22b57f59d2805ff70929b

  • SSDEEP

    98304:LM+hQjBUyDvBEdfksAQ8njoMB1yKKY4M079sildAj:LpwQ8EM/AY4f79silyj

Score
10/10

Malware Config

Signatures

  • Amadey

    Amadey bot is a simple trojan bot primarily used for collecting reconnaissance information.

  • Amadey family

Processes

  • C:\Users\Admin\AppData\Local\Temp\1920-3-0x0000000000A70000-0x0000000000F28000-memory.exe
    "C:\Users\Admin\AppData\Local\Temp\1920-3-0x0000000000A70000-0x0000000000F28000-memory.exe"
    1⤵
      PID:1756

    Network

    MITRE ATT&CK Matrix

    Replay Monitor

    Loading Replay Monitor...

    Downloads

    • memory/1756-0-0x0000000000A70000-0x0000000000F28000-memory.dmp

      Filesize

      4.7MB