General
-
Target
4238cb026d8c98dc4b36544e36f3b2acb92108ab9a93d3116567aec3a858c486
-
Size
558KB
-
Sample
230206-1ckf5sfh87
-
MD5
a70383608439541635dd017db477b7a0
-
SHA1
4f0e849a66e160231baefd75c3782abbd6937fc2
-
SHA256
4238cb026d8c98dc4b36544e36f3b2acb92108ab9a93d3116567aec3a858c486
-
SHA512
5d2fea87f382fba512e490c796cef31a55eadf6ac3d0579c8ed20398dda764efd945cf67b5d476ca78019feecc4b7f5865cdf0a9046489e5b7c11e09cc1932b6
-
SSDEEP
12288:YMrty90PF+mZp8ZlFuI6F+QMaTNmNRe6he6YAU:1ymNyFuvHTNmNRe6he6Yn
Static task
static1
Behavioral task
behavioral1
Sample
4238cb026d8c98dc4b36544e36f3b2acb92108ab9a93d3116567aec3a858c486.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
4238cb026d8c98dc4b36544e36f3b2acb92108ab9a93d3116567aec3a858c486
-
Size
558KB
-
MD5
a70383608439541635dd017db477b7a0
-
SHA1
4f0e849a66e160231baefd75c3782abbd6937fc2
-
SHA256
4238cb026d8c98dc4b36544e36f3b2acb92108ab9a93d3116567aec3a858c486
-
SHA512
5d2fea87f382fba512e490c796cef31a55eadf6ac3d0579c8ed20398dda764efd945cf67b5d476ca78019feecc4b7f5865cdf0a9046489e5b7c11e09cc1932b6
-
SSDEEP
12288:YMrty90PF+mZp8ZlFuI6F+QMaTNmNRe6he6YAU:1ymNyFuvHTNmNRe6he6Yn
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-