General
-
Target
5462b9f0ecd383b57ff4033d167b06b48bdfdcd46780182c6eac1b06ce9c75c8
-
Size
558KB
-
Sample
230206-2ln2csbe2w
-
MD5
244fa3455f4ffe33c91af01a9170158f
-
SHA1
0031f9975c2db6db92831ac570f796782ed7c243
-
SHA256
5462b9f0ecd383b57ff4033d167b06b48bdfdcd46780182c6eac1b06ce9c75c8
-
SHA512
7c3d6309e20d899d0a28677f065e55c642f9ae2204be316c987a8fa6be048eac8ee92b99e607a7012f0dd85bab51dc570e02354291c1301c5daf86ce612336e9
-
SSDEEP
6144:Key+bnr+Sp0yN90QEzroXBdmcrJamUGsjR5MnS4ZSL4DGTqyQmNRKVPgzlm9NQ0m:eMrWy90qrmkxsF+MMaT0mNRKAlmkoS/
Static task
static1
Behavioral task
behavioral1
Sample
5462b9f0ecd383b57ff4033d167b06b48bdfdcd46780182c6eac1b06ce9c75c8.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
5462b9f0ecd383b57ff4033d167b06b48bdfdcd46780182c6eac1b06ce9c75c8
-
Size
558KB
-
MD5
244fa3455f4ffe33c91af01a9170158f
-
SHA1
0031f9975c2db6db92831ac570f796782ed7c243
-
SHA256
5462b9f0ecd383b57ff4033d167b06b48bdfdcd46780182c6eac1b06ce9c75c8
-
SHA512
7c3d6309e20d899d0a28677f065e55c642f9ae2204be316c987a8fa6be048eac8ee92b99e607a7012f0dd85bab51dc570e02354291c1301c5daf86ce612336e9
-
SSDEEP
6144:Key+bnr+Sp0yN90QEzroXBdmcrJamUGsjR5MnS4ZSL4DGTqyQmNRKVPgzlm9NQ0m:eMrWy90qrmkxsF+MMaT0mNRKAlmkoS/
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-