General
-
Target
3424-16-0x00000000003E1000-0x0000000000449000-memory.dmp
-
Size
416KB
-
Sample
241212-1m63wsylbz
-
MD5
c45e565aeb08312b111a7b283d9c496b
-
SHA1
d3f3de75564363a0a5b13cf430871cb4b26eb06a
-
SHA256
b1cdfc05438369e72c4fb041ea29572dfc8feb6a7abb0d7e816630a8fc40c58a
-
SHA512
6a5ea411c029763085e4056e0b0dfc2ee3508b62de25d43c3a52744162937738a0501893d787c9bd11b625edf4a9dab24fb641a423cb43de02da6963e54ac733
-
SSDEEP
12288:L7ARqATRIOp/kKHEvhRSF+/tTXukokfz+G:4wATRIgc+/F0hz+G
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain