General
-
Target
2520-2-0x0000000000181000-0x00000000001E9000-memory.dmp
-
Size
416KB
-
Sample
241212-1xg7hs1jen
-
MD5
8f554c1dd83de5ec8944f846881c519f
-
SHA1
740e3695ef57e76b9761bf64f57769ff28b7c69f
-
SHA256
13df537365dd407cb3e7cb43d3bf54b8fb18f3bf6a758604cb19aa4f26da1dc7
-
SHA512
e3e1c65726f0d1267bad5c736cd7dec386c712883f2f13ef0067bbd6c28bfb2c9015d74f066ec472f9210588440682b5a3eb01a545da24a1806d40fbed540887
-
SSDEEP
12288:Na7/L2ajt6PTWM8ZjnIGgAJLLj6/ClRuO2ex0:uKajt6L5KzjrRx
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain