General
-
Target
2880-2-0x0000000000E51000-0x0000000000EB9000-memory.dmp
-
Size
416KB
-
Sample
241227-l3mlvstrbj
-
MD5
5a5c00670f11a0740ff45ea021aa695a
-
SHA1
69e3d78f1b0e6cf863d46d8f03112819e1330875
-
SHA256
1c8eda14db3a4e7b5e0ed4ecd9b0986a4e994d22dc07f2457f2a1edf7678645d
-
SHA512
7544e0af3458ee68a5a79f33a24baa76a6543dc7d4c11f2050ba9b7eff0afe65613188c0b73c2d5ac36a52badf4028db8c59909bec957235c5c2e7f695cd4e09
-
SSDEEP
12288:a5/GkOkwcGaivXBfRXBPCB/5gKujZroUB:sPOkwcXix/C45og
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain