General
-
Target
1832-2-0x0000000000A81000-0x0000000000AE9000-memory.dmp
-
Size
416KB
-
Sample
241209-vgcdfavjfx
-
MD5
1a3ae285c2bc20111b9fb0dfe907ab77
-
SHA1
115005e7dd6f2f895629459f397df665b603d772
-
SHA256
03c53450753e51824cf4ebe50067fad1695aa1a9c83766e8d062af68bd168575
-
SHA512
8695d2054845adc3b663054df59fdbd33dd5f5f2d035523716be8b964a3f3c0893a0a4e8254c9ce8a6fa304f3cc4bd96e5528c52eb8d33121786da586dbc92f5
-
SSDEEP
12288:9qQNqo3OHnDKZDhfl3V2TD/MAhuemuhT:ZYo3OHDUNqTJRhT
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain