General
-
Target
2076-2-0x0000000000BD1000-0x0000000000C39000-memory.dmp
-
Size
416KB
-
Sample
241231-p8r1ba1nbv
-
MD5
3ba14068538dc8cd65fbc744316c1524
-
SHA1
cd0cecbcce1429d8ba6a54dca1af20b8ae4a08a0
-
SHA256
ec8afda6dd5097dc5ace5145f2c14ec7f244a1d58d22958503c7290fa16db4c8
-
SHA512
518804bd45c2144ae73f3520bf719f487f2e24890452ed08efb4d4dbe80db2f5ede38065e18287dfa8dc9615da94bd2e7496201920b4c4fa44ea9c6331d92338
-
SSDEEP
12288:yCWeDW7Y1GCuAo176YsZ6i/mJCubhDAOn:8IW7Y1/VCg675AO
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain