General
-
Target
1984-2-0x0000000001141000-0x00000000011A9000-memory.dmp
-
Size
416KB
-
Sample
241227-jerjsssrby
-
MD5
3b72bc42f843d2aa8f61d84b857a2c14
-
SHA1
8fa83e2eaaa90c6e9c434933c415c99e68c1bb3e
-
SHA256
b47485b0cab1cab2b2f1a33ae07f963807b7c0c014398e1b3883cfc3f4af9aa1
-
SHA512
21b1a5829cb0833aae81efd5d73c4d555b2bb67156c3f617d983623b75f613334de7f078f0fd714a98ad225e559a7ea93945b26eff1db0eaa747f1822457e78f
-
SSDEEP
12288:RusDt23NqlyW6Oxo5POJ6YG/0jEutxLO:cat23NqlPTKRYTxO
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain