General
-
Target
2752-2-0x00000000002D1000-0x0000000000339000-memory.dmp
-
Size
416KB
-
Sample
250106-3nwdwsvqfn
-
MD5
239282a6327c2bf5f624c02d15c6842e
-
SHA1
9c5bd0c4f52826e5ed4769297b8ac8e697b63d3b
-
SHA256
6178b29232c6abefa7536e701ffada4f0fa7e27c5efce6c9ca0cee2b5c6d9651
-
SHA512
4936f1fdc5d248024afdb3969b296cb3cf75cbac0b19eee4f26097931607b921586bb81888c97f367f9c3dc752b2aec3339551c9131cde4a790b6a070a02810a
-
SSDEEP
12288:7a/h6TYsdF0I5z4S/Hc8Q7F6aBQiubxM2f:4jsdOI5zl/876L1f
Malware Config
Extracted
Family
amadey
Version
4.41
Botnet
fed3aa
C2
http://185.215.113.16
Attributes
-
install_dir
44111dbc49
-
install_file
axplong.exe
-
strings_key
8d0ad6945b1a30a186ec2d30be6db0b5
-
url_paths
/Jo89Ku7d/index.php
rc4.plain