General
-
Target
1128-2-0x0000000000E11000-0x0000000000E79000-memory.dmp
-
Size
416KB
-
Sample
241226-xqlpksvrbq
-
MD5
9a5874b767bee6705166ab520bafd0e5
-
SHA1
12917760759c35687fca424871691fa5388020e3
-
SHA256
0ea7a6cf34217730751d46c59247d7eaf2d8c9a9b1af53388fbc2badc08946db
-
SHA512
5c23e17439c0a3f5b788b42ca4999a70071e3db408dcaa1bc674498f03f964a22b6fb468de3611b3f7bc87a971ac639a872a0890649d28aa0aa33caffba6cece
-
SSDEEP
12288:+JIUiR4H1W0TuUxjAUwzNUmX/ZkWu/lXsX6:iNH1W0a+0Wm25sX
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain