Windows 7 deprecation

Windows 7 will be removed from tria.ge on 2025-03-31

General

  • Target

    2092-2-0x0000000001021000-0x0000000001089000-memory.dmp

  • Size

    416KB

  • MD5

    80bacca5a24f598b92871e30d62265e2

  • SHA1

    e9347555c473dc41c25ec521743fb40e168f8db3

  • SHA256

    017d2a697bcb9c6e706591c0840d3e29bb7107ee3e8e1f2bdde1ef6d8425adf7

  • SHA512

    569a7e1fe00147adbfb7582c516816fa2986d600084e9d41be6fe8b14e53a35451902fe3e74879cd2d3fb8809f003417180215da7a4a8a7757bac9c04b66f822

  • SSDEEP

    12288:Ran70MyjZRsNJ7yQQnJ3ZrLqQ/tO2uPDBA:oIMyjZ623z/q71A

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2092-2-0x0000000001021000-0x0000000001089000-memory.dmp