General

  • Target

    1984-2-0x0000000001141000-0x00000000011A9000-memory.dmp

  • Size

    416KB

  • Sample

    241227-jerjsssrby

  • MD5

    3b72bc42f843d2aa8f61d84b857a2c14

  • SHA1

    8fa83e2eaaa90c6e9c434933c415c99e68c1bb3e

  • SHA256

    b47485b0cab1cab2b2f1a33ae07f963807b7c0c014398e1b3883cfc3f4af9aa1

  • SHA512

    21b1a5829cb0833aae81efd5d73c4d555b2bb67156c3f617d983623b75f613334de7f078f0fd714a98ad225e559a7ea93945b26eff1db0eaa747f1822457e78f

  • SSDEEP

    12288:RusDt23NqlyW6Oxo5POJ6YG/0jEutxLO:cat23NqlPTKRYTxO

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Targets

    Tasks