General
-
Target
4fa14a2ea1e595025df398c4ee987f91e28e7b808dd7911b5066abbe878c2a0d
-
Size
558KB
-
Sample
230206-2nhx5abe3s
-
MD5
ef8698bbc9cf9c50da3dfa881a0e67d6
-
SHA1
38d64f8b69a554eff77f0383431f23f4f916fd42
-
SHA256
4fa14a2ea1e595025df398c4ee987f91e28e7b808dd7911b5066abbe878c2a0d
-
SHA512
5c7169f648386f122105dd89b0ba25e5e6e50de5117ec7abcdb9974420d5d7a40a31a9d13dd4e41fcef1d0377f93cce3dcf97fa4ecf3953feb1344614b894371
-
SSDEEP
12288:uMrxy903T28eyM6/3OpX5sF+SMaTAmNRKCr81VICfFLq:vyo1jM6/+sHTAmNRK111fA
Static task
static1
Behavioral task
behavioral1
Sample
4fa14a2ea1e595025df398c4ee987f91e28e7b808dd7911b5066abbe878c2a0d.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
4fa14a2ea1e595025df398c4ee987f91e28e7b808dd7911b5066abbe878c2a0d
-
Size
558KB
-
MD5
ef8698bbc9cf9c50da3dfa881a0e67d6
-
SHA1
38d64f8b69a554eff77f0383431f23f4f916fd42
-
SHA256
4fa14a2ea1e595025df398c4ee987f91e28e7b808dd7911b5066abbe878c2a0d
-
SHA512
5c7169f648386f122105dd89b0ba25e5e6e50de5117ec7abcdb9974420d5d7a40a31a9d13dd4e41fcef1d0377f93cce3dcf97fa4ecf3953feb1344614b894371
-
SSDEEP
12288:uMrxy903T28eyM6/3OpX5sF+SMaTAmNRKCr81VICfFLq:vyo1jM6/+sHTAmNRK111fA
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-