General
-
Target
2492-2-0x00000000008D1000-0x0000000000939000-memory.dmp
-
Size
416KB
-
Sample
241211-afd6eswlds
-
MD5
4164109fbee2d5e545046326beb5a44a
-
SHA1
366da97cad2cd5fc8dc72e64113032d465285076
-
SHA256
b7e7a4fcf2ceff1964f83bb0675b7f4893cc0ff3a90b532b042e96785db27e03
-
SHA512
2f5f8328b0e980c068e21d6cf21904a79126e8145ae7b200a37bd19e05d8b98da9474afd82e0edfdbd099d8a9213f5cb718d34f82145ecd95ea4452cefb26eb5
-
SSDEEP
12288:Ckrfqjofq0Qyj4vbN9toFNqA/AoyurRxJQK:TLcofq0d8xKqO3JQ
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain