General
-
Target
4796-16-0x0000000000E81000-0x0000000000EE9000-memory.dmp
-
Size
416KB
-
Sample
241212-yhfzssxmbr
-
MD5
c099b5405ac3ea824a1ca310999aa7a7
-
SHA1
4102bbd00df241ebbbb4d88e11edd60a22365260
-
SHA256
2d77e7e7fa99ac83f891d9c819897b482ec505f811979950214408f1be1ca10a
-
SHA512
b4e61ebb0864d9e5568c980925ae54d563e670e72b10275961edd60ff1f9b37d3ae2dc5ef4fc80758353754d9a2e463675d656c6c8dda53bee708f8199f9063c
-
SSDEEP
12288:9bK/lda5yODXW3MpYWAVKTm/I/huemuhoB3:sdda5y+GcQ0TfRho
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain