General
-
Target
2816-2-0x0000000000E01000-0x0000000000E69000-memory.dmp
-
Size
416KB
-
Sample
241227-fsnhhsslbr
-
MD5
32b29ae993e201d6190808615c1413ad
-
SHA1
2e13df4073ddeed53193e0080f7e6d5ed1ca6f5e
-
SHA256
fbeceec893bb6df4edcf09c8f26c27c43503f1a3d39159ccac386e5fda8685f5
-
SHA512
04488a293f90230f5fcb365f39c75e25251e09607917d817657d1985181d13652f32bd7afac12fc2b6f96962bc21e827d4517e6b05a687d64875940050f654a5
-
SSDEEP
12288:FHEVuqVK3TRrFVZXqZYVKrg/DApumOG97:OVlVK3T13BMrXR97
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain