General
-
Target
2520-2-0x0000000000FA1000-0x0000000001009000-memory.dmp
-
Size
416KB
-
Sample
241212-rs6vmsxjd1
-
MD5
df98c8e49f50df27f7ab32884ba61e9f
-
SHA1
ebdb13b26f74a4ad56748ba0ab1b6eddc8ae8311
-
SHA256
be3c08ee92403efc58d34d0fea558e2a64fc4e5fbb7759bbb2f10569097e7a5a
-
SHA512
2d344e6ec5913a8bef073cf939897a20524c43a3a94950bbd170020bcbe6587c4e5f3341a1dc4bec0c755109d046f508b5ce114d3ddcf1ea916d7decde1553d0
-
SSDEEP
12288:yNDSQkUVqVfdlX40Hz/HjCN9/ymB+utE3yzrY:MLkUVqVllr3CmSGyzrY
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain