Overview

overview

10

Static

static

10

Sharing

Copy URL
Twitter E-mail

General

  • Target

    2304-16-0x00000000009A1000-0x0000000000A09000-memory.dmp

  • Size

    416KB

  • MD5

    ffa96f21c1e19b1f8ef4a01c371c864b

  • SHA1

    6a9055a3e7be8ae142db5367e05227acb2d2f728

  • SHA256

    8aaebeee29b7f18db410b8dcf5ad97bdafa5631a3b91b9eb707a2cd00d539b3a

  • SHA512

    36a90d760fcc6826bdea39c2a735d3db8702b5c2550a3d4b58484b249c0700c45c273656e1433497598bdc76b7a0f18ce8d6b020c41329b489181551a94c4b1a

  • SSDEEP

    12288:PALxZdNy8Y9r3FX8JzGM5H/WdTuok8PQA:6fdNy8q7R65yxPQ

Score
10/10
9c9aa5amadey

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2304-16-0x00000000009A1000-0x0000000000A09000-memory.dmp