General
-
Target
2380-2-0x0000000000141000-0x00000000001A9000-memory.dmp
-
Size
416KB
-
Sample
241212-tldavsyrc1
-
MD5
d79a2f967ef15b67f468bc2406f4dae1
-
SHA1
e04ca1b86ed6bf4182b7e712cffbdd84dd9f59ed
-
SHA256
aab5e789cb54603df5e1a8a377e8a4200ced92d64a0580dbfe2aeea23ebe06a1
-
SHA512
92c759931d7c03dcb076ceee9ef34b42abe303afab3fef8a275a00d837cdf1254d80d31acee8bb31631a9067c11afe06814fd110b918e4cc0e1009c4e0ecbfe1
-
SSDEEP
6144:BO1Zq5XnpSlVrZn6BQYVwMOlCnhz+0+feFZvaXqcluonHV/pNtuSC69d72jY:B9dniVgQYtnVcgvaXHbnHV/pNtuSC69
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain