General
-
Target
2364-16-0x0000000000551000-0x00000000005B9000-memory.dmp
-
Size
416KB
-
Sample
241212-spj25szpck
-
MD5
7378b658b6154ed01b47aa3efc1a0bb2
-
SHA1
6886352a2f5d6c523542ff4fffbbf33c9b443fe9
-
SHA256
15c3bfca26f806f0f250b7c368be99486e474a4e60c2d54016b2c1d245c9824a
-
SHA512
2be0a27c69793b4bed9a16f6170179d77c08b45e79c806a7e51916551a7e51ac9d23a61d58fb11e6c29601b3d2451fa5c25b2a83e352a5c25c23f0a4037bb07a
-
SSDEEP
12288:K/bTaUCR8VrqLPLMa0BPcSB/FRauTpbYi:uPvCR8VmDwwS9ZYi
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain