General
-
Target
2432-2-0x00000000013E1000-0x0000000001449000-memory.dmp
-
Size
416KB
-
Sample
241118-matp5stqcs
-
MD5
d1a526b19a3e58f2212a3059d3567dfd
-
SHA1
e76328cc44a9b8e59f55bea94a1e8addf89f2e29
-
SHA256
7611e101b51d5e1ab59a2558d6d71bfa9d23ce3b5c915b51d7a8b15ff4f66bb9
-
SHA512
310a0f31cf16c829206e80c1e7f2c349c50b587aa94c3e179356f18777376fc0817d74f918963310d74173b9bb1f3a6dee2210069ed61fc157e9ab2882905cdb
-
SSDEEP
12288:Q9Fjk0NtNwK3aQhb0u1yvOQ/ObKuTPVUkq6:Epk0NtiKqQ5yOPlUk
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain