General
-
Target
2860-2-0x0000000000251000-0x00000000002B9000-memory.dmp
-
Size
416KB
-
Sample
250109-tb1cmstmfv
-
MD5
777541453a4aa0cc5dc5e3cc94f47e65
-
SHA1
c3f9a6bd618828c2f5ebec1a7c87c686bf716bbe
-
SHA256
1d566715a08398ef12fcc3fd0fa996019fef5e9b3ddf30a5689a6348931e962d
-
SHA512
0bfbe5fe6547794f314d207e9609cc12ddbed7a40183ee95839a943dc27e0550f3039641d00e916e60f2f9ff9466a466605b6a6e22e23e5bfa8b7f19a3678250
-
SSDEEP
12288:ax5KjlBWNqlalCMRDzYh9yCWv/dbKujZroK6:uUlBWks02/CWh5oK
Malware Config
Extracted
Family
amadey
Version
4.42
Botnet
9c9aa5
C2
http://185.215.113.43
Attributes
-
install_dir
abc3bc1985
-
install_file
skotes.exe
-
strings_key
8a35cf2ea38c2817dba29a4b5b25dcf0
-
url_paths
/Zu7JuNko/index.php
rc4.plain