General
-
Target
2652-16-0x0000000000CB1000-0x0000000000D19000-memory.dmp
-
Size
416KB
-
Sample
241213-npqgpsxkbw
-
MD5
bd908107ba4efbc516234b9c113c2e64
-
SHA1
dc502c71714e54bc24b734ac0b3aa14e10d78685
-
SHA256
95b353f219f9bf73c228d0186aaf368ad244a5db61ce084710a607765b174a98
-
SHA512
d8367177ea7db3d2cd200936c10d86e7995bdfe216fa56a07c1f5e8b5563114f12057ab320f46c2dcccebb012dbb4adbca516e35b47c44017f283eb34955a712
-
SSDEEP
12288:oQEvw19szvMIoXDcl4xx4Hsa/nH4uJTFzm:mI19szErTG5smhzm
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain