General
-
Target
2092-2-0x00000000000E1000-0x0000000000149000-memory.dmp
-
Size
416KB
-
Sample
241226-wnyqpatnhj
-
MD5
7bb235c500441682036b87e8a0a6ed00
-
SHA1
3a9f6154acb13f9e433e1b33a07e451314ee8fec
-
SHA256
1b76d1f7cab34b48d01d0df30254ef0c85c3f517d7df5cb85a1bb7044f18a263
-
SHA512
99d356654a881313996b0e79f0776334f54bdafa7193bcfe33ac4893a320ebeec6b2dc46ab8f3690ae57a50eff2538170eb8d63cbcb0f276d856d67fc35072be
-
SSDEEP
12288:bPWs4COnZMZ0t0xWCx1t1K/XLnu0YwyGVKJY:q5COnZqmW11+ByGVK
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain