General
-
Target
2292-2-0x0000000000B61000-0x0000000000BC9000-memory.dmp
-
Size
416KB
-
Sample
241227-g663fsspdn
-
MD5
7ec5cb842aef9bd78eba0041d2f13136
-
SHA1
ce40554d0fa4bbede7f1957607773ab60699b48f
-
SHA256
3b0829005070937466a109f4aeae804122f47ef3d13a74ad1838b55937d568cd
-
SHA512
aa1f922f6f2e4b7c1a3bddcd0799ef74560f13e2ea539b66f1dcbf2daf474d1013dee9da4bc4630cdfa0ace98e8d040262c2c90ba0ec1e66d5843c6e9802ec4a
-
SSDEEP
12288:Tii3QBrOgTlRGh+dBmyYMpd1/dh/u8wWfr4:1ABrOgX3X7dJBr
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain