General
-
Target
292-2-0x0000000000E51000-0x0000000000EB9000-memory.dmp
-
Size
416KB
-
Sample
250107-pndbes1lgx
-
MD5
28377d1db88a1ca1a9d5e128879e1d88
-
SHA1
032d323ae984757657657edfe1f18f8cacb94ef8
-
SHA256
e6365cc6c5fa6352077cc50901a3d8d27352feaa1c851033e312788ce0949ec9
-
SHA512
0064548199de29ce471fe9b178ca4cab6981e5ded58e24eeb66a5f73cc3392f6450b0f3f21a1f5ee2a6cd2f5636ce5c35351a2e82709677afe41614ad33d6067
-
SSDEEP
12288:0Xn08ngqrYETRaVHt8sotSSBD6uTZ+Bu6YP:engqrYETQVN0Sok46y
Malware Config
Extracted
Family
amadey
Version
4.41
Botnet
fed3aa
C2
http://185.215.113.16
Attributes
-
install_dir
44111dbc49
-
install_file
axplong.exe
-
strings_key
8d0ad6945b1a30a186ec2d30be6db0b5
-
url_paths
/Jo89Ku7d/index.php
rc4.plain