General
-
Target
2744-2-0x00000000009B1000-0x0000000000A19000-memory.dmp
-
Size
416KB
-
Sample
241210-s6jgyayqf1
-
MD5
e6c3ab36df05bb8816de549b7100e443
-
SHA1
a75e6cd298e384b2b90c20c1252eb60ae0cf1263
-
SHA256
4f0296f13752fc82ae92452c1795c7ddc25bd7e89e2aec37503858f798721c25
-
SHA512
49334ed063e854c2a4069d02aa3bd6b6454bcad1633f1937162ec127b4e85459a79f513d52ad13cf4ec25857bbc7b534f06c14c2ce5d9f0e5ef1fdda5a6a6b4a
-
SSDEEP
12288:44/CqUWsWdxoDmYSEyZ5to2RcD4/BVjou5DVoD:CqUW3dxoDpVQFcohS
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain