General
-
Target
2964-2-0x00000000003F1000-0x0000000000459000-memory.dmp
-
Size
416KB
-
Sample
241227-e8p6ls1rdx
-
MD5
70f4859ce4a80fb9c3aa4634e0112504
-
SHA1
25a05e0e2df18c98463c48505ae0116fb94b6ff2
-
SHA256
7cc321fa3a94a6c7d95f86d717e85c7328d5c795145df6c3c53c98f652ef642a
-
SHA512
5f8da7c4e6c2a0eb23ee11cddfb01a30bc1336b21650bc6f1a61ee842a9d2cca4e6f4343c5282f73f9eceb883acd70f6fcb8d2258218ea7c0a4b4f344d4dd9a0
-
SSDEEP
12288:0osP88ovDyLu072u9ElOuzBS4r/VacudnJV4g:a08ovDyL973S4f4gx+
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain