General

  • Target

    2508-2-0x00000000011F1000-0x0000000001259000-memory.dmp

  • Size

    416KB

  • Sample

    241226-z5ynss1jdt

  • MD5

    89a9c55beb8ad676936ab8b475b429ef

  • SHA1

    98af705819fa3ab1b28a6e9104cd6ee4e053a747

  • SHA256

    85e55f235609f8a88a9f63aecd18af865d2ee0f472fba45e2cfa11d40c0ab421

  • SHA512

    5478bb1441f9c8736d7e06f92308f2283e8d0fb210b6d301a09a8ed9e09aa0801c7a05e47040a4d607af3f20438f9c8780463e8e117744a6d5a0abb4d78a3b17

  • SSDEEP

    12288:TqgYO2w06e9ZN+Z0GMd9HoK/OltuygcsQ:Glhw06Er0gHo/JR

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks