General
-
Target
b64e453c137ab1a32bef1995087913ddee93c2d867fb7638c55f773d2edd033d
-
Size
558KB
-
Sample
230206-1sdcrsbc7s
-
MD5
cf6c6bed9dce58dcb21e2684feeaa3bd
-
SHA1
dced819db0c1451b3119d9bda8ddc442bc87b009
-
SHA256
b64e453c137ab1a32bef1995087913ddee93c2d867fb7638c55f773d2edd033d
-
SHA512
380d0cff1256bb89a1e1a8706aa410a0ab8a27b0bdb56cb4373b2f928f69ea89264cd2e0b9e05478f930d551b3133f86f5ecef157d01e65b9df783b04c542996
-
SSDEEP
12288:VMriy90VuBBxc6MtfCJTA/sF++MaTemNREY3luId59:3yCuBBi6Mt9AHTemNREFIV
Static task
static1
Behavioral task
behavioral1
Sample
b64e453c137ab1a32bef1995087913ddee93c2d867fb7638c55f773d2edd033d.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
b64e453c137ab1a32bef1995087913ddee93c2d867fb7638c55f773d2edd033d
-
Size
558KB
-
MD5
cf6c6bed9dce58dcb21e2684feeaa3bd
-
SHA1
dced819db0c1451b3119d9bda8ddc442bc87b009
-
SHA256
b64e453c137ab1a32bef1995087913ddee93c2d867fb7638c55f773d2edd033d
-
SHA512
380d0cff1256bb89a1e1a8706aa410a0ab8a27b0bdb56cb4373b2f928f69ea89264cd2e0b9e05478f930d551b3133f86f5ecef157d01e65b9df783b04c542996
-
SSDEEP
12288:VMriy90VuBBxc6MtfCJTA/sF++MaTemNREY3luId59:3yCuBBi6Mt9AHTemNREFIV
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-