General
-
Target
876-2-0x0000000000DB1000-0x0000000000E19000-memory.dmp
-
Size
416KB
-
Sample
241227-ezc5pa1qdy
-
MD5
2eedf5b5cec0ea82b06ad5bf0bf5559a
-
SHA1
df365acffba688b6ca5318993b76585dd06f99b8
-
SHA256
c9b5da179a9286084af5c361b7a07492d3fa60de07871b7c68c81d5900d00763
-
SHA512
1b8842eda299d3b4694f28ed08466b1711b31330c9de2e589a37d52da936b6a4dee8e20b94be7ef407a5d06fee5ea8a891e836b209ccea98d2ebc3722389015e
-
SSDEEP
12288:4Iuakc7fiamYPRoghocM3cdM/R+ou5DVSu+:EzIfiappficdzhSu
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain