General

  • Target

    2684-2-0x0000000000991000-0x00000000009F9000-memory.dmp

  • Size

    416KB

  • Sample

    241208-w4s55swpaj

  • MD5

    f52cb589b4533cf85a741f5581b92034

  • SHA1

    00d812f7be9d5dadb57139f2595f45e649ae2fc4

  • SHA256

    9758cd106c6c47a07bedaf88fa2204c785e84c08828940c239e6b3932b1bb301

  • SHA512

    19d0e0aeadca7481b6a34b8ee363ae40b5c0a027ac097f4bd76200ba6b60d52d600ef4bf24b3f84d5ac2f1c21cd8b1fcbb40a2321e0d1ea1c964c6211ad42074

  • SSDEEP

    12288:2F11jfeUXOL2n5rH5FzOgeK/8IuuXtPkU:K5feUXB5jhe45k

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks