General
-
Target
1964-2-0x00000000003C1000-0x0000000000429000-memory.dmp
-
Size
416KB
-
Sample
241227-hmkksasqer
-
MD5
1b78a04c91cc8c2044aba29da0271be2
-
SHA1
771a8f7ca1487a952c15564e76495ad53076e788
-
SHA256
4e143bd5296b00ef6a13be1b5e4043e52012b0c6433c88973c7785436f5ec0cb
-
SHA512
ab9c32920c899ac0676db03913594e7011e2bc23978f55a002bf787fb8a0d6ff56ad2f36776e345517f36673d77b14e110507bb890cedf3ff919c23ca77895ab
-
SSDEEP
12288:5ZvBQXhO5G/ho5A+UKNrvH/oHluqaCms:f6XhO5C+2YvSxms
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain