General
-
Target
1760-2-0x0000000000C61000-0x0000000000CC9000-memory.dmp
-
Size
416KB
-
Sample
241227-h4wz5ssrgl
-
MD5
04f55250c1954372e12db0fa6edd14a1
-
SHA1
5a9f791b04d3d4f8843fa0f41221b78d96ec1506
-
SHA256
cb5d78738c647fbd917a3cf1a4df5db74b521b4945a97ed89a2e8933acae06a0
-
SHA512
eacee03bd05f4ef1615b9a1216927f05742e7c2d738a3d0184236ac4c6bb1e8f95eca9b3455bb01347eee2cd3c720e363b3417f370d053cbf31acb2f2aee9555
-
SSDEEP
12288:jn0Km872U0mByw1Tanh6eNe/2aPuMgaY07m:wi72U0wJ9uNYPp7
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain