General
-
Target
2336-2-0x0000000000191000-0x00000000001F9000-memory.dmp
-
Size
416KB
-
Sample
241212-z1tjaaxndw
-
MD5
7434c413375ace9024cf1855210f55a2
-
SHA1
79b5bdb93ca11dbdf0ccc5c410c27bbb74561ece
-
SHA256
cdd29cc106351d2e755d4fda81e9c4edbc2bae57cab45ee34276dfeedfe47fca
-
SHA512
4bce101ea68c7f926cb2ae0799b7efab04dfc3a1fc7c8ea5cb1c337f9b586295580cc9467eb065ff288a064621a0419dc12bdb4683c928dbd9ec0a4e86b65545
-
SSDEEP
12288:2nnhU38XIy2tJQ9ygwX/IVnFdG6O9HAxhBP5hFilsdOd+4ZgWzowE6Ai27dI+q5Y:63rbDwMwrceQ5k83aET
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain