General
-
Target
2212-2-0x0000000000B41000-0x0000000000BA9000-memory.dmp
-
Size
416KB
-
Sample
241213-akhz6stqfp
-
MD5
847cf01d693e819f8abfd18b095600a0
-
SHA1
e31377daec74908135d825b506371be078bed312
-
SHA256
a1fdb7507aff37a889141c8d5ece35a4aa6ea8b00ff28b8ab8126fec70d04672
-
SHA512
80f6ad05009799794e6aaa44fe296d76374ff007e5908a5981b7a97ff27b4c62699865b65727ceb5e14dec3d6ff191cc1a8af682265dcfbebc7c770fc26404a5
-
SSDEEP
12288:hKeJSuwWc4YHt2xt3uX5enD/15Nuyiad:t5wWc4cw/Tnfxd
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain