General
-
Target
2452-2-0x0000000000D21000-0x0000000000D89000-memory.dmp
-
Size
416KB
-
Sample
241212-ss7mlszqcp
-
MD5
6c351780663f305343490e2aa83603c3
-
SHA1
8d806b41b4499cc2c250d76ac53987dbe2f06db8
-
SHA256
379e4b72bf88e1645ffd661c4665bce6ecef8f31e28cab5c62107ce0ddc8dffe
-
SHA512
b2ae978640d40ae0cb595de391bac626ec811a49062c81d263cef35e98424e40cc624ea2fa874286fbb88dd8e129f5b4255024a4a9c2973270b3170ae5101c6f
-
SSDEEP
12288:3TBWa9BZdw1XlR2IHOnYOBxT/0LbuAMkH:NJBZdw1VkQaxORH
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain