General
-
Target
4448-16-0x00000000008B1000-0x0000000000919000-memory.dmp
-
Size
416KB
-
Sample
241212-stzcmazqeq
-
MD5
f8a926de567493fe95644dcfa09cda2a
-
SHA1
5b454f1bd03c1303e281c4f4b457514b04ecc59a
-
SHA256
5ea2a5323d755f95a1c41cf03d00fce33ecd4b2e6825231ee0c5c884707b1b9e
-
SHA512
d4088af9e5d91db3166987369880a9dfdb89dcfbf58764b425d08bd859a81da08b127aec5255df52c291430f7434920715dd7e6a303bf05eec9a7320c58bfa0a
-
SSDEEP
12288:orAVwasfuecoWTnURUG/qssH/Z04uJTFC:DuJfue3WU5sehC
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain