General

  • Target

    2568-2-0x0000000000F71000-0x0000000000FD9000-memory.dmp

  • Size

    416KB

  • Sample

    241205-w7sc1swnhx

  • MD5

    59baec92cbd46ac661e80036fc0ae14e

  • SHA1

    e0137f5f513647c5e1d5afbeef071eceb1a0f813

  • SHA256

    4c253ccd81d829b0894ca6598aca23734e0bcf8eb1c163124ce2000337108e52

  • SHA512

    806a6f33645bb503de887ba34ade2c58817e8bc2c82c28797a18aa66f4d9e523f2401d85db92de60caf1204a9d73d5c9c9577fb172be5aa9ae6f09a288e90e05

  • SSDEEP

    12288:sScWYWw2sFcNsmgy3jrswm//nUuVvxmZX:wLWw2sqq9LwexmZX

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks