General
-
Target
2116-2-0x0000000000D11000-0x0000000000D79000-memory.dmp
-
Size
416KB
-
Sample
241226-xszzzsvpgy
-
MD5
2acf7f4daf2656724efe307164ae5be8
-
SHA1
ef302463b3caa7b222a409a5b61a067d604eb331
-
SHA256
d16a9d5bc7cdf5173d37ddc05c5edc9c5eae14f847252a559a86c5ff16a8be8c
-
SHA512
7cc0af8722b3fc2264a6fd0d7700aaf9a384c9c926e2b41d0fc5171a3812cff00cbff65fcde8f9e375e4be080a5dc97d4c44bc22ecda5afbf794e4a31b334b78
-
SSDEEP
12288:OTjsrBsgLQQF+V9lZvmG392G/45muP1RxcFwSbqK74:UWmgLQQIfnZ2x5cFwS
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain