General
-
Target
2052-2-0x0000000000C11000-0x0000000000C79000-memory.dmp
-
Size
416KB
-
Sample
241212-tqaqjazjds
-
MD5
b5f7909f458e0a4a5fd806fa334af92b
-
SHA1
f2a1c1254b6c8afc1b8a4c15497257efdbe51f02
-
SHA256
af82557596b53b539d4ed102b6d4b88b60e297af46a09ca6297979e985983a07
-
SHA512
71e1d1fd449a21acfd93f8cee13a4ffbcfdf21bf42a317ba0da2d6a77f969796cdb069097e65cbb0e12a3c9f1b6e24a8811feb8c166d415e4ad37b8fa553c4ea
-
SSDEEP
12288:eV9SEl8Y1dO1Stx4KWSzGs/ha2ufF3MInY:u3l8Y1wAfjG35M4
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain