General
-
Target
2068-16-0x0000000000CF1000-0x0000000000D59000-memory.dmp
-
Size
416KB
-
Sample
241212-rn2p5aynbk
-
MD5
2646a4af5e524d0ac509ffd41852880d
-
SHA1
ff64c1c5588e6587bb50a00633ec81a866c19f51
-
SHA256
9742109ffa27b6db804056c34751e8e3c818d7f7ba5dcf8d971b4a6f0140af7f
-
SHA512
eb007a91c2bda3515b52b495ec367c1630f2a137464f038efd3142cb447793abd2184f06be6f4d159ada4b36db0f0148dd85010f0787f3b476b753b6d9bad0bc
-
SSDEEP
12288:kT9Q53Ssg5kIAnQKdyrboe//vsutX5uCg:2M3SsgG3Q5ouxuD
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain