General
-
Target
2204-2-0x0000000000B71000-0x0000000000BD9000-memory.dmp
-
Size
416KB
-
Sample
241227-pa8keavnfq
-
MD5
839d64d51bd2b78c072db5740b72d219
-
SHA1
58598a00caee0a3a22a7141c47f7e33cfe9ebada
-
SHA256
821780c7698ce6c6c651c46630f4aa4183540af27d198034090a427c563aec93
-
SHA512
cd753b93127309bbe2f192d7630892caf742443482ff0008fadb82d1071be090d7d3673af254b4d81b8d2c8a609a7763d74d6cfb18a94c213bbe2b2322466a22
-
SSDEEP
12288:sSGaestnL9coowcAgiF3wA/u/UuVvxmD:ONstnLSPzKwLxm
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain