General
-
Target
2064-2-0x0000000000F81000-0x0000000000FE9000-memory.dmp
-
Size
416KB
-
Sample
241212-xxlm6awngm
-
MD5
deb2bfee59815f6ade6658efc3f0a6c3
-
SHA1
7f9ae18af8e98c48df4fa08fa9980bfc28005d72
-
SHA256
66ed53f9ce0801e7d143065567bef4876cc57ec7a8b1a53b60c82103c7bfee77
-
SHA512
5cdef24d931165134d49dc46b66d926b02d23cc18c1e226519fa8eb50c2d1d9db06d2d8ab09ea96e65b85fc00c088e2e201938ea3afa07f57de124ae64628f41
-
SSDEEP
12288:tdxKrf+4t1wzG/dFsD7wJD8/MxxuuW+R4o:8r+4t1IGrnDbRR4
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain