General

  • Target

    2760-2-0x0000000000FC1000-0x0000000001029000-memory.dmp

  • Size

    416KB

  • Sample

    241226-2wd9xatpaz

  • MD5

    70533f89b31d211a9b36b614a3c74c78

  • SHA1

    9ef2e417dd4b30e58e7d09c9cf288481667f4d6a

  • SHA256

    55cc655423bcbb80375626e6838431164e1662714d3d411405304604e38d07f8

  • SHA512

    7590ab0ecde763f744d5e2feab7d728d7519326b5bc7ef7b916dad453547b904e35e4272fbd98421eb7b2f4271749f522512ec5f1456491aa988dbe59c8edf12

  • SSDEEP

    12288:lK5aDCLZsV8ukCXx/HyowKAu/eacu1pf24:lmUCLZsVZZ5HAA924

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks