General
-
Target
2364-2-0x00000000001D1000-0x0000000000239000-memory.dmp
-
Size
416KB
-
Sample
241226-xs3e4svpht
-
MD5
e53f00b993ded543f9931cc7af832f3b
-
SHA1
76b5be6feea58e1a827a1a1373de132c6eef605b
-
SHA256
66425beabdb24a3077e3818729874a133aa55cef98bd9a28d6c87b6733a91120
-
SHA512
83b1b0ecf1e71ad3bd3ff3038faa085947adcb4036a06b8b2fefb7339ffb600fb0565fded4395012817f834d30e7b2b22bd437239d32cf257f06b5575f679869
-
SSDEEP
12288:S4J5BoxDfIr6j7Pipr0sV4/NlaX/Q6iu7BjgMIl:OCr6j7K5XIan5gMm
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain