General

  • Target

    2760-2-0x0000000001331000-0x0000000001399000-memory.dmp

  • Size

    416KB

  • Sample

    241226-w8437svjb1

  • MD5

    b04bcac25c3206dec202a1a5113523f8

  • SHA1

    13510f749dbe3f4bce15aab79c8d6fae1f85ac0c

  • SHA256

    923211e592c706e9e98ae09b64816d80cfd73f98d3d44644ef958995ec572d71

  • SHA512

    8730f1e63e6a33ae83f9c36796f8b405ae167276e3a9d8e1668a5861e1e2d7101eb465f7ae98ec632523e4a89d1709941dcecfe43a9da556d63bb91cae218b19

  • SSDEEP

    12288:qCCs2pXrNuD9Z6kMD9hv6ujs/jY8HZu+kAtVo:luXrNuDv5grjU5tV

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks