Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2188-2-0x0000000000DB1000-0x0000000000E19000-memory.dmp

  • Size

    416KB

  • MD5

    2bc6f69856826f1296ce9cb780c12a1b

  • SHA1

    68490b3b339cba5b937d64709b96068683792a68

  • SHA256

    b11933ec175fc8bf959fde68eb2b8c7aed242c96a342c428930e88851987ba53

  • SHA512

    d3f6f1483540127cb03e3f4b19e7cf1f585e737d672013d6407d512a5cb7a909ddf84aa7ef0cd3703fe21b8d70cc146450c455cf9bb4cef5215f5978a781eb39

  • SSDEEP

    12288:4jlCCyA+j0XYFycBUl4aBcyZ/z3ou5DVSG+:y5t+j0oQy2cy9hSG

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2188-2-0x0000000000DB1000-0x0000000000E19000-memory.dmp