General
-
Target
1220-2-0x0000000000871000-0x00000000008D9000-memory.dmp
-
Size
416KB
-
Sample
241227-hyy8basqbz
-
MD5
0926cc6301d005ff1399fc1407e8b612
-
SHA1
4a34efa19c000a1cb5aec33e1dcac90df71363d4
-
SHA256
1d4e58026448edc1ffa015c57929d4e748e194a311285a3f8482e374d473ff71
-
SHA512
9f590ba38030ac558de4c103417d653487e80fe77d5af4600e58309021a851bcf4f21af1f8174cea70c93516e2e48c674f3eddc6628439256b39f59bf1fa6b87
-
SSDEEP
12288:cafnU1WE10XBMxsmyMLRCKEg9/zLkulfh3mmZ7:lPAWE10mqmRsgpx3mmZ
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain