General
-
Target
2236-16-0x0000000000F11000-0x0000000000F79000-memory.dmp
-
Size
416KB
-
Sample
241212-rxam1ayqdr
-
MD5
633fdfa1398056a66085f880bbe9e4df
-
SHA1
ffbbf49480e7a45d790bd3559db4453867ac7735
-
SHA256
2e1ef3e829b6d9725a85085ec43204bab737f3885a629de6e1c75425120ee2d3
-
SHA512
da971defcdb46d6e0d6888ab675f6387b2b0d737ebaa80926e12200ec9663c8c04c7863698f249a5fa797333b23dad965d234eb50499817607818f45f60bee44
-
SSDEEP
12288:uiKdtlDiCClegWl/ByHzPOW8/Y+GuvVpB8sJRN:HevDiCCItpHWY58aRN
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain