General
-
Target
3804-16-0x00000000009B1000-0x0000000000A19000-memory.dmp
-
Size
416KB
-
Sample
241212-1tzmdsymfz
-
MD5
83254f890c2ebd2194abfbb1cf333c15
-
SHA1
9ae8635a5fb3af26244cf9e222ddaa88343c23e9
-
SHA256
109498ae7d336c972caf917db775bac52a3e4b6c48357bfcba109450a3aadc4f
-
SHA512
992394cea1a721751c664c0aad11fb02753e80a08cc671125671b64f534bb44cef083b0fde83bd119da7e5c5f05d3d915904dc3fce2616fa51f66284d9bd578a
-
SSDEEP
12288:4i5PqUEJrran2HYnOAsPj5Q9cf/Vz3ou5DVoD:TqUExran24ObgcdhS
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain