General
-
Target
2524-2-0x00000000002F1000-0x0000000000359000-memory.dmp
-
Size
416KB
-
Sample
241231-qlmyhsvjhm
-
MD5
bb4b053f8e6c25a4211a0fbe6f22fc9c
-
SHA1
6763ce863e13df4d2a1527b873af53f590f4fb70
-
SHA256
e9a5bc6a4414f41bd0f9989e3943da825981b8421b5036909257a266e4c8ea3a
-
SHA512
9092cdcc438829d41b56299317b31ce3ccdf8a960016ef55196b71be2c66009a0572c4204894aa88da39f54fd66ec5d5c12de0bde0ead29618490f3122b4e9f6
-
SSDEEP
12288:ec09B06LowHAxE/qP8hh54QB6cu93uY1q5:CHLowHAe/Oa43z
Malware Config
Extracted
Family
amadey
Version
4.41
Botnet
fed3aa
C2
http://185.215.113.16
Attributes
-
install_dir
44111dbc49
-
install_file
axplong.exe
-
strings_key
8d0ad6945b1a30a186ec2d30be6db0b5
-
url_paths
/Jo89Ku7d/index.php
rc4.plain