General
-
Target
2024-2-0x0000000000C31000-0x0000000000C99000-memory.dmp
-
Size
416KB
-
Sample
241213-fjv61a1jck
-
MD5
87c5b4c85264b1bc9446ab91c2027e63
-
SHA1
f4d712cff56ecb57767b543ba4964bbfe3fdab63
-
SHA256
3a40d8d53de47ccb20b6023395aa53b1e16790020e6303084c1dd1907387a475
-
SHA512
3d6b10464f55f5443cbd924acb65075090268ac77056ea86e529e396974440d54d5173b33a353d11df7e7fad78c0ed6163130a8e925ec8983186c74a2105f702
-
SSDEEP
12288:Auyui9iq7alQSBGepjIu1PE+/VdwuBbtKY:T2iq7aGF0vEehK
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain