General
-
Target
2508-2-0x00000000001B1000-0x0000000000219000-memory.dmp
-
Size
416KB
-
Sample
241212-xsxvmatqes
-
MD5
fe5ece65c60799ae7c222da6e4337a99
-
SHA1
88a7b02a703f49ae549dfd14ef0b6b19225c5eaa
-
SHA256
c2f53a32d037d36946fbbfcd75e3aafea08ba5f3618db8d09c98b8cbab1fd082
-
SHA512
769b86d266dbc8b21360bedf8aac4e9307b456abee0b1dea0ee709ea7613880a4b9845f70ea92c7474cec3f0dc5ec7054f5cac96808a34640536e3de7c894b36
-
SSDEEP
12288:4Qu+FV73wkYTPfF3/16Jbcw/80ou5DR3SU:YmV73wvjN89cahSU
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain