General

  • Target

    2180-2-0x0000000000EA1000-0x0000000000F09000-memory.dmp

  • Size

    416KB

  • MD5

    826380924ef7a5c958748e97aa78a67c

  • SHA1

    4d0dc1b48efdc676430106ce1e220b9e7b54bd03

  • SHA256

    4c682129fc926f370fbfe21d0c32905a0d2fedd86874b4adbb7804085d4a9cb7

  • SHA512

    eac78ecaa09bd1fd5c8feac5201f8d685f8b93033cfa35fd12d2983a314365a217aec95119a282ea461ba577acd99f5945b26707683ee3180083b736ea6d0cf0

  • SSDEEP

    12288:/zrtImUeFWtjgijCsrsApC/JhDuYUs/3:vmmUeFccKVpSx/

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2180-2-0x0000000000EA1000-0x0000000000F09000-memory.dmp