General
-
Target
2548-2-0x0000000000F01000-0x0000000000F69000-memory.dmp
-
Size
416KB
-
Sample
241227-ba6h6axkhk
-
MD5
9374261ec6aa52282e1b43f168567090
-
SHA1
bd306b27495f99ce9b8de316c70b3f08a579cf94
-
SHA256
e6d8114e3e55179a1512113ac8ad0c6bbf8311a6b2e9a49972b8e5e201185724
-
SHA512
58bbe3a6b6013b94451a3baf25a500a0dc31b4a27a6d1b1b0b28575d562d30fce399c169d63d40f4e72caab6f74171395ac9c294649a03bf68e63289d8c2ea1c
-
SSDEEP
12288:1StiB0KmDcsbpU8MAepuzbX/r55u2+Wpr:vaKmDc8WPWblRpr
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain