General
-
Target
2060-2-0x0000000000FE1000-0x0000000001049000-memory.dmp
-
Size
416KB
-
Sample
241227-p8pj7avqdw
-
MD5
c79156891a0e00071f68ada533cd0797
-
SHA1
48af5ca45b7a72a0ac60ec09e36a4fd24b2ef723
-
SHA256
fe71dc75e80edd4e3b6e5692815b695be179cd6a4c99421aef30a87385c6da1a
-
SHA512
323651396a666bfc757053445f797b8ad778557c30e98c005a5cab748f5d504818373748adb72602ecbd6241aaf3c79e2b07945a6ff2195abee5284dc0ba6a68
-
SSDEEP
12288:6YE0R8JlCuXwIb+RYMchPtOm/PhKuTPOU9nZ:/E48JlChIcMFOoeU9
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain