General
-
Target
2856-2-0x0000000001201000-0x0000000001269000-memory.dmp
-
Size
416KB
-
Sample
241226-18773ssrbx
-
MD5
6ca90d5d6a3b869d9d9c80617928f72a
-
SHA1
385d605f41989f59846d0b8858796b7c78ab51bf
-
SHA256
eef7a9c2de93c5dfe00001f453df2b4d1e4a0b6d7cab03ef6c7fc9c7c605c70c
-
SHA512
a875c6817bd5305fd419a6d7181d6e4736ba977bcc31350d45ecbb5713e0b324fc911edb17afb13734f026696f65ad60e39d1f37ee697c135f561970a3166c82
-
SSDEEP
12288:T21+t+peE1a67Ukxvvnc68W/4s4uhNYwSSV:6Mt+peE1zIKx80JSS
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain