General
-
Target
ed1e2a8e458c30600be5435b97b67439c5d90159d9527a188b11f033dde8cc42
-
Size
558KB
-
Sample
230206-18kf1sbd6v
-
MD5
0c1b14973d7d4991d2dcbcfc135eb519
-
SHA1
8023236bed6912dac61808e99d29009842fce5a3
-
SHA256
ed1e2a8e458c30600be5435b97b67439c5d90159d9527a188b11f033dde8cc42
-
SHA512
2de3d44e9a47f18bd44b3a5ae00b8f76091908e5a8614c31cd7c967a5c6387110182811b1d2232e5c11da9cb09243267aafb7ff38371800cbda3a848019a8763
-
SSDEEP
12288:jMrTy90Z6DrZJe0u8FsF+mMaTQmNRC+wpazdLxad:QyM6Dr3e00HTQmNRCHQzdlad
Static task
static1
Behavioral task
behavioral1
Sample
ed1e2a8e458c30600be5435b97b67439c5d90159d9527a188b11f033dde8cc42.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
ed1e2a8e458c30600be5435b97b67439c5d90159d9527a188b11f033dde8cc42
-
Size
558KB
-
MD5
0c1b14973d7d4991d2dcbcfc135eb519
-
SHA1
8023236bed6912dac61808e99d29009842fce5a3
-
SHA256
ed1e2a8e458c30600be5435b97b67439c5d90159d9527a188b11f033dde8cc42
-
SHA512
2de3d44e9a47f18bd44b3a5ae00b8f76091908e5a8614c31cd7c967a5c6387110182811b1d2232e5c11da9cb09243267aafb7ff38371800cbda3a848019a8763
-
SSDEEP
12288:jMrTy90Z6DrZJe0u8FsF+mMaTQmNRC+wpazdLxad:QyM6Dr3e00HTQmNRCHQzdlad
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-