General
-
Target
2168-2-0x00000000010F1000-0x0000000001159000-memory.dmp
-
Size
416KB
-
Sample
241227-kveevatmhm
-
MD5
1fe7b56141be60e6eaaa9582c66f3938
-
SHA1
7001f4a1afded026c217df861de4f4d2cfe481ec
-
SHA256
2cb74620d536263a578c203d62b4214e42d421178a8ec68d5108f918bbbf60e4
-
SHA512
22d7b6197739e8add004ed3fff631be4143fb0030dc6e7d1455877f95ae9d0b30255b666b667ecd8106b05036c3d7e4ddd252a9c9e7023c976ff495974eb31c7
-
SSDEEP
12288:KhJdmADq4GNjWRwtEGl+sXQ/pl9uiwMho:2JwADq4cSiHX0Jh
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain