General
-
Target
2720-2-0x0000000000AE1000-0x0000000000B49000-memory.dmp
-
Size
416KB
-
Sample
241226-xlzewavmey
-
MD5
a5d3f4e47019f3e209df4d843eb97981
-
SHA1
ec3e99366f0410acdde3ecda057375fb83901c03
-
SHA256
84ca83eb20a9f954ff6d8cfd43382764ba373949d6dfc1de3757b4591ae56566
-
SHA512
a426e8d3018ff1bf28e78b2dff8ace42a88d2454e7612b1a873a7fe8779a7ecb6abf38b8cbcad450db70fdc4851bd9f9c1d1ca254dcd119b87d0b413fd42391d
-
SSDEEP
12288:7mzo+qrkGfDP5l7zMhc+HnVM/yYHuU4QjA:ikRkGfDhZ4rVgBj
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain