General
-
Target
2068-2-0x0000000000F31000-0x0000000000F99000-memory.dmp
-
Size
416KB
-
Sample
241212-qswt1avrb1
-
MD5
0a58f2698b76c66a7f6e79bdfb807e1c
-
SHA1
870be0e0bce2e15c68f2f42274b065be8297287a
-
SHA256
95f0e2cd9f3eb46eac8743f8331f7cf26a0ef8d3761e26b1a8bf7ac77e21204f
-
SHA512
0c1b733baae5c0c057ccfdc6e325a6e830b24cce02f593818f06ecac191c76bf6be414df0b96b1400d9afbd2b1962f328d48a60da24e85c29e5315db47cbad31
-
SSDEEP
12288:w1CgkQ0oDQ1EgDnzImvkI/Uo/VaAuRrd6:77oDQ1Xr8qUrh6
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain