General
-
Target
46edbae36c6588a435e0cb8a900816c78265640c738988a761191f488d8b2721
-
Size
558KB
-
Sample
230206-14l42sgb44
-
MD5
a3fd504429c4d3e11b6c92d62d8bcabe
-
SHA1
fb72a21c5ceec410528ba5e23285945c6261d528
-
SHA256
46edbae36c6588a435e0cb8a900816c78265640c738988a761191f488d8b2721
-
SHA512
fcbb628c9999c7dabf4709613afc54b806948237a984ec7f4eb87cb67c06374cf01cf7447db3c4c8c141eaf24e69839374ba6bac52285af5caa6fb80c3a009fe
-
SSDEEP
12288:RMrfy9036e7KsYocqEblUFosF+uMaTkmNRquAfemVZTO:2yg6e7K9fqEpoHTkmNRquA/ZTO
Static task
static1
Behavioral task
behavioral1
Sample
46edbae36c6588a435e0cb8a900816c78265640c738988a761191f488d8b2721.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
46edbae36c6588a435e0cb8a900816c78265640c738988a761191f488d8b2721
-
Size
558KB
-
MD5
a3fd504429c4d3e11b6c92d62d8bcabe
-
SHA1
fb72a21c5ceec410528ba5e23285945c6261d528
-
SHA256
46edbae36c6588a435e0cb8a900816c78265640c738988a761191f488d8b2721
-
SHA512
fcbb628c9999c7dabf4709613afc54b806948237a984ec7f4eb87cb67c06374cf01cf7447db3c4c8c141eaf24e69839374ba6bac52285af5caa6fb80c3a009fe
-
SSDEEP
12288:RMrfy9036e7KsYocqEblUFosF+uMaTkmNRquAfemVZTO:2yg6e7K9fqEpoHTkmNRquA/ZTO
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-