General
-
Target
3032-2-0x00000000001C1000-0x0000000000229000-memory.dmp
-
Size
416KB
-
Sample
241212-qvphpsxpek
-
MD5
33c61cb934e4a9a7f955874e812bb223
-
SHA1
3763bf654e5df1a3e19a8ef76687f31aeea8a0b6
-
SHA256
de277c4ae0e06ac89051240e1adb93a03134cf848be1dc9f5e445286fa65b722
-
SHA512
cab47cb3bc0dd6f1b3810c635c851d38d5e016a746bad678c11fdac28c3cd71f59cbb2ce387c752da43dc0fc12a554723567b6d072d5cde26995811df90b9025
-
SSDEEP
12288:ZHk8GmpispYK6fZLFuDeitKUPP+/1aFuK6ilB:5GOispYKuh0CiBPZxl
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain