General
-
Target
2700-2-0x0000000000241000-0x00000000002A9000-memory.dmp
-
Size
416KB
-
Sample
241210-v1ctbawngj
-
MD5
4a76dd066857ce7cbc97491474f77af7
-
SHA1
21ad13761bf5322c1b6e1fdd47f3a1f640d174d4
-
SHA256
e70ae0aa74d182b84738dfaf57f3fa5b12981c917c2a8937e34cecf514ec32a0
-
SHA512
827fd8dfc7f6b5fcd3ba0fd4a8e94c94641f2ee1b136c06f772fd3afbc26b80c3bc450f8a3be2d3dc7a09595270984b737a4c8aaf538e9d29c81cd1d3a3fd551
-
SSDEEP
12288:RAJDK9K15gvYZXl6pKm+OZ+3m/1X9uiyKN2XN:UDEK15gvYZcsv38RNe
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain