General
-
Target
2500-2-0x0000000001311000-0x0000000001379000-memory.dmp
-
Size
416KB
-
Sample
241212-s9h1ks1lcm
-
MD5
4cf30a338c8a3208c12030f07b20ad4b
-
SHA1
10d954a7eb20b13795ae61db8457ecdcb72b0930
-
SHA256
544a064e7dde0d504d8b4eb079e9d366f4df4aa41d57d0dcc8ab594375f7d853
-
SHA512
ce8825d0664f1f3a73dc68a52039cb77f203190bffd006d14413ed4031cd10768c6899815b320667ba34d13bf18780117d0a534dcc0370c82364b3a87ffe6bc4
-
SSDEEP
12288:lg1mUHeZMevjeZ1uZYV9t2/64juQ2eXu:CZHeZMCanXtSVX
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain