General
-
Target
2404-2-0x0000000000CC1000-0x0000000000D29000-memory.dmp
-
Size
416KB
-
Sample
241227-sax1fswpfq
-
MD5
f1232f32ed11ed4bc8e5e5ad36ae1fa1
-
SHA1
b911302a157b76ccf6c569a2782669ec3de1e6bb
-
SHA256
483def9768a63c717c7fbf43e5fda98c17cebcd55157b590e704956d8c224bd3
-
SHA512
86c63d1453964b66ec0612e5308eaeaa6d1ac64e1a5cdd11789755b8682a6126db5d4ba96f634909005cf8e4553d793eef456d71660f6e03543ffe67f66966a1
-
SSDEEP
12288:JoCWf3fPHzJvU+v8A7+PkPfb/PK1u6KSVewM:FI3fPHNU+T3f2RVew
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain