General
-
Target
2180-2-0x0000000000EA1000-0x0000000000F09000-memory.dmp
-
Size
416KB
-
MD5
826380924ef7a5c958748e97aa78a67c
-
SHA1
4d0dc1b48efdc676430106ce1e220b9e7b54bd03
-
SHA256
4c682129fc926f370fbfe21d0c32905a0d2fedd86874b4adbb7804085d4a9cb7
-
SHA512
eac78ecaa09bd1fd5c8feac5201f8d685f8b93033cfa35fd12d2983a314365a217aec95119a282ea461ba577acd99f5945b26707683ee3180083b736ea6d0cf0
-
SSDEEP
12288:/zrtImUeFWtjgijCsrsApC/JhDuYUs/3:vmmUeFccKVpSx/
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain
Signatures
-
Amadey family
Files
-
2180-2-0x0000000000EA1000-0x0000000000F09000-memory.dmp