Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    3808-16-0x0000000000601000-0x0000000000669000-memory.dmp

  • Size

    416KB

  • MD5

    bffef6916979f01b756275aa0a417258

  • SHA1

    a94ddfe49d854dee54d8445800b00d7fb5f2e9c6

  • SHA256

    f0576ec937a418c37f9cac2cfe9d6d46fe1bd48c95e9d8d2598f4addec46f1bd

  • SHA512

    d1a6ce923111eb1045af6441b6ac8de83d706b19d8b86743dadb6a0737d271e2a32a85b6b790cc83198c775bdb7d536017bc55be3cccbe35848aee5c36856c71

  • SSDEEP

    12288:FXaBqi4FliNEOFr6xhNerBp3rt/YLpumOGiYP:EEliNEOp8vYrsRiYP

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 3808-16-0x0000000000601000-0x0000000000669000-memory.dmp