General
-
Target
268-2-0x0000000000251000-0x00000000002B9000-memory.dmp
-
Size
416KB
-
Sample
241226-y1ybssxrft
-
MD5
9ac793eb8f5f2a52e47c385025e1e702
-
SHA1
2d1daf901322ddfd3d978d98fb094c2b6550bbcd
-
SHA256
a5094e97605a8723ff3bd37d19c377adf6cf498d351a3ab66f253c8bd5a7f04b
-
SHA512
273f9740bd2e8f468ab88f3363849d439934163a92d7a8e56b4da49140da19cc2ed2255ec16e2d0433c49eb74e1d4572969e4ce46e3ef2c30f5f7d267c1240b3
-
SSDEEP
12288:aastgdNoN3UaobatDxusgUCaQ/7P6KujZroKA:GSdNoBBcwjCaG65oK
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain