General
-
Target
3044-2-0x0000000000CA1000-0x0000000000D09000-memory.dmp
-
Size
416KB
-
Sample
241227-rg3c3swmfj
-
MD5
4ff302723c0fdfc0a4b90765f1e7f899
-
SHA1
110e06e8b54594b7a413f529cdeaa1ce79a38262
-
SHA256
a178d39aec060a7909410823189bcb800958e20b1022ae4ccfbe69f75d88c5b7
-
SHA512
bbd7f94417ac4caa3b1a3fc46d5af428b9edf7ed0a87dc5dde1a00bbe058b0fa1828fcbbd6e9201f8b7755772cb13b52bf4644936d4df94534337de0740720ce
-
SSDEEP
12288:fR2yw9XPMCaNpCmUX5awXJc/2Wju40Mfh:wrVPMCwkBZJixf
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain