General
-
Target
2484-2-0x0000000000E71000-0x0000000000ED9000-memory.dmp
-
Size
416KB
-
Sample
241212-z8xwnszmal
-
MD5
5bb5457826b30216b1e9159fe895a34e
-
SHA1
545ee9d71098b0d261c95242158410033f7556eb
-
SHA256
9c71be8d63aff08cd1c5e190fbf7ec7cfb8c796a980e7c094a7b313f057c0b74
-
SHA512
2c356e23b0d1f0d868c398e92bd5f03e1daacd7949cff1cc613a660aa5cbd751ec1b32afb5cd5bbe6069b4af28318fd098684c7ca69c72b09c973f285f60f8b2
-
SSDEEP
12288:8GGG4qDm7E/sTZE0mijmWA2x/PhxSoAuv9/Fv2Tf:CjIm7EUtPbA2vxSo1rv2L
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain