Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2068-16-0x0000000000CF1000-0x0000000000D59000-memory.dmp

  • Size

    416KB

  • MD5

    2646a4af5e524d0ac509ffd41852880d

  • SHA1

    ff64c1c5588e6587bb50a00633ec81a866c19f51

  • SHA256

    9742109ffa27b6db804056c34751e8e3c818d7f7ba5dcf8d971b4a6f0140af7f

  • SHA512

    eb007a91c2bda3515b52b495ec367c1630f2a137464f038efd3142cb447793abd2184f06be6f4d159ada4b36db0f0148dd85010f0787f3b476b753b6d9bad0bc

  • SSDEEP

    12288:kT9Q53Ssg5kIAnQKdyrboe//vsutX5uCg:2M3SsgG3Q5ouxuD

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2068-16-0x0000000000CF1000-0x0000000000D59000-memory.dmp