Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    1828-16-0x0000000000331000-0x0000000000399000-memory.dmp

  • Size

    416KB

  • MD5

    fb3c232309b42466190b54977f6c7bc2

  • SHA1

    c9dfe3a428f2d58143f612cecdcc3b1fbb2fd9b2

  • SHA256

    de3395fff8cd27c6bbffa9d472ff6878ef5d2bfda48cfbf52fddb0d76c93fcdf

  • SHA512

    7c8aade4248e148d2a63c830e2b9a501edf6bc34aa18bc6cd4b76310b4983f263039a4b80a8add49b0bc8a5121d508d981f576a29196a8eec92b1ae4aa2bdca4

  • SSDEEP

    12288:wEOvcsZ0VvjgOdQWJO5hzVUo2/c/NAuRrd6O:eBZ0VvU0Q02U8h6O

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 1828-16-0x0000000000331000-0x0000000000399000-memory.dmp