General
-
Target
2024-2-0x0000000001111000-0x0000000001179000-memory.dmp
-
Size
416KB
-
Sample
241212-yavszsvnfy
-
MD5
6844b6a4796f25958550226344cf1758
-
SHA1
a742ab25bc5683fb29782b7d0ff2c89c49080bba
-
SHA256
44a2b3b0f987224fe5590a1e822b6018260e13b6ea3dd2e7a5f605f444f5a207
-
SHA512
045fba6507eaee2abad7cd86a75bcf0e3506e2d767b125ac88200e9239ffb1bd663a96619f33c2af03110e9592362253f1de75bd9551a1c13452f0cd51260aac
-
SSDEEP
12288:Z5ldM5hav1PTDZpRMpnCNX/5dDuwW+3z:fly5havRffrNfV3z
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain