General
-
Target
1860-2-0x0000000001241000-0x00000000012A9000-memory.dmp
-
Size
416KB
-
Sample
241227-mv3tjstrgs
-
MD5
4d09e6cce9c523b867d3581d38286abb
-
SHA1
b89c590d2100d99700539149b4825f728c377c2d
-
SHA256
24f5b6930e5099db841fdf8d18faa1078ee953f8c483b3e910192691872811cd
-
SHA512
b016a0f65929bb531e28bf805772db7b3bd98099817453cece30f5465ae46a98202717d5487d6de19ff8b6c06940a0879b06b241463af723117b3318f97d81ba
-
SSDEEP
12288:t7kI1kshuXFwGJ9jr3bYdNId/ff0udhb+L2r:mIhhuXF9nvGIZR+m
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain