General
-
Target
2952-2-0x00000000012B1000-0x0000000001319000-memory.dmp
-
Size
416KB
-
Sample
241207-y2t1rs1qay
-
MD5
0280501cbbed6a3dbf7e971011fb3a07
-
SHA1
b3398c177cde311d12f0562dc26e41a95003c601
-
SHA256
de8fb1e06ea910f45ac9d3cb789b1721a2d0d3b549ff35e1811b45bb82decdd2
-
SHA512
ce550532022dfa268e3030c044cd487116ca183e516195214d59d6bd446bc148f738d1ef9cd86d53c277a9b6cb59b337b27e85fad2025fee07c0d05a8550a076
-
SSDEEP
12288:eoQHLjOuVhaB8h9lGCFo7jVL/31BumMILpvW8:riLjOufUCVO7jVpZlv
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain