General

  • Target

    2860-2-0x0000000000251000-0x00000000002B9000-memory.dmp

  • Size

    416KB

  • MD5

    777541453a4aa0cc5dc5e3cc94f47e65

  • SHA1

    c3f9a6bd618828c2f5ebec1a7c87c686bf716bbe

  • SHA256

    1d566715a08398ef12fcc3fd0fa996019fef5e9b3ddf30a5689a6348931e962d

  • SHA512

    0bfbe5fe6547794f314d207e9609cc12ddbed7a40183ee95839a943dc27e0550f3039641d00e916e60f2f9ff9466a466605b6a6e22e23e5bfa8b7f19a3678250

  • SSDEEP

    12288:ax5KjlBWNqlalCMRDzYh9yCWv/dbKujZroK6:uUlBWks02/CWh5oK

Score
10/10

Malware Config

Extracted

Family

amadey

Version

4.42

Botnet

9c9aa5

C2

http://185.215.113.43

Attributes
  • install_dir

    abc3bc1985

  • install_file

    skotes.exe

  • strings_key

    8a35cf2ea38c2817dba29a4b5b25dcf0

  • url_paths

    /Zu7JuNko/index.php

rc4.plain

Signatures

Files

  • 2860-2-0x0000000000251000-0x00000000002B9000-memory.dmp