General
-
Target
632-2-0x00000000009A1000-0x0000000000A09000-memory.dmp
-
Size
416KB
-
Sample
241227-pt4qkavnhs
-
MD5
7b8da09f58cc12a91faee30929730e25
-
SHA1
a4400bd88dbf70c4e2c1e6bc6724d7e716dc6a73
-
SHA256
7bb732cc1d94b7b8c3c27da7002a5910d5834149d5247d167614e87d6882ac7e
-
SHA512
6339aace6f639d2a841a4dbbd9fd424491391129d45f4d3cfbe73ad4bd4b112ab3d5f15da5105bfbbc04ea7bc23dec7024da204d16bb550c28c1a4ac7a8443b6
-
SSDEEP
12288:PhYupzrOUK9LQYIqgKbG5m/igTuok8PZ:CmzrOUQsnH5WxPZ
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain