General
-
Target
1016-2-0x0000000000131000-0x0000000000199000-memory.dmp
-
Size
416KB
-
Sample
241226-xe665svkht
-
MD5
16ee8e30259c10a1134fdf61363973c5
-
SHA1
180dbc7f923b8465ebbf5e1311ea24340dbc3557
-
SHA256
ab1bf595c873b441e3ce8d25ee5ffa17782b3d189a041b1a26b504ae00fad05f
-
SHA512
ecbd66504c9b80bcd790fa5552ee4eef113d0cc9e7c71125ad9078bc8a63495b116788ae38b5480b50381a3fd35b37670cce43166ba4d9e3b096357473df9b86
-
SSDEEP
12288:Q3EmfId+OESAS2jUw6WrG06/o/guxL9az:MQd+OEFnQX07ha
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain