General
-
Target
2640-2-0x0000000001001000-0x0000000001069000-memory.dmp
-
Size
416KB
-
Sample
241207-y9nhysxmcr
-
MD5
10e720113a19b952375ddab673e70401
-
SHA1
aeca93549d11f8dc00849fc382a57c6e67a9c4fe
-
SHA256
49a4e76c89a61fc6d1c7114b8b3520fd1581b1ba723f9548f2d67176176316de
-
SHA512
dc5b9a76db123cd4098ecd88f7397cf18beff2e29626c418eb7230d6a0d75f0178abe81174da63cf623a24ab0238a0ca148946194279625c0b252da0da0713f2
-
SSDEEP
12288:q4toEm8YytaHnnxz2xO8Fcv2/avYuBtvyiF7Q:5lm8Yy4HxZucvZJyT
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain