General
-
Target
2932-2-0x00000000013A1000-0x0000000001409000-memory.dmp
-
Size
416KB
-
Sample
241209-n1ymfs1mbk
-
MD5
ce96ff85366d4c5bac3ab11f3426068a
-
SHA1
20e6672d4b81ab3d748c7f0d1a876331303ca778
-
SHA256
f133064829bcbea78f810a59b1f93af224f08bc1fdaf507bb1b794c4f9d4d447
-
SHA512
a60cbdc6edad1811b9fd3c0e84c372b0b7fd8000f9db44e91a7caa8bad9c18f99fc39aa3ce55a2bc63f20126d0b7ebd7153c39820aad5e35aa7af503fe288c33
-
SSDEEP
6144:ql1aoXtWJy6yAsxtibsRko5+809ilZfZ32SwPYFEF9nxdC0/hluuHLJIIRPcj:W4J5y6bsN0YRTwPYar/C0/hluuHLJI
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain