General
-
Target
2572-2-0x0000000001341000-0x00000000013A9000-memory.dmp
-
Size
416KB
-
Sample
241227-kmfypstlbw
-
MD5
abe40ce0eb15d68629cbfb9565d2d3d4
-
SHA1
f86b0765fb3543c1e671736dfb8185910d76f5f9
-
SHA256
dae7303749e99351008b89eb64d1503a10432b90338a3e646eb7400d3b404d5e
-
SHA512
4094beec25f681d7de4a48be41eb5931bd38227c50ffb0b9e979defc2339a04aa3a8d6956bfd446db467a6df65d987f3777266bcf9a7c623369a81e30188017d
-
SSDEEP
12288:wqOS9HKbCdL2Ta3y85BRoZ4+/7uPkuNRru:wodKbCdSTGdU4Rxu
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain