General
-
Target
2420-2-0x0000000000CF1000-0x0000000000D59000-memory.dmp
-
Size
416KB
-
Sample
241226-w5jyvsvkfk
-
MD5
b9d0e12e5ec0c0735a63d7d136630830
-
SHA1
e0ef3c358efa3aac7c682faefcdb31f23dcba5e6
-
SHA256
64c19ed3a13e5328fcfc218f6e189dda02aa851cdc808d127502459c2cff3b93
-
SHA512
7062104e74fc21d9243ddbc3243f13103b1771d5a709063aac04cc20dd23af60414a78393c6f430f5c904e0188b98993f97a32f39cafd445831bd58790f8b4df
-
SSDEEP
12288:kEYmD733lkklLSXKzC6EIox/gUsutX5utg:q8733lrBWOToDxu+
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain