General
-
Target
f2fcb0ce8c0f4ed66e26494af3542d8577d46db0635eab70f856bcfa5cd5b83a
-
Size
558KB
-
Sample
230206-2slvksgc57
-
MD5
41ac2f833594803f8025ffa59f2c9be5
-
SHA1
78704ff566b9e5561e10857a39276de922f1fce8
-
SHA256
f2fcb0ce8c0f4ed66e26494af3542d8577d46db0635eab70f856bcfa5cd5b83a
-
SHA512
67355344e31aa10a43a5144b711ff48ebe356fc2de4e72a2f7d2c84486ee3c760af6d2b832e1a0bfaa481b6245b54405cf1fe82e36f7ff64790c049ac185588c
-
SSDEEP
12288:IMrry90Ez2aXYBr3PJ1ii/d5sF+gMaTkmNRKCN7q5e52Ds:Ty1z2YYlOHTkmNRKCN7QMas
Static task
static1
Behavioral task
behavioral1
Sample
f2fcb0ce8c0f4ed66e26494af3542d8577d46db0635eab70f856bcfa5cd5b83a.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
f2fcb0ce8c0f4ed66e26494af3542d8577d46db0635eab70f856bcfa5cd5b83a
-
Size
558KB
-
MD5
41ac2f833594803f8025ffa59f2c9be5
-
SHA1
78704ff566b9e5561e10857a39276de922f1fce8
-
SHA256
f2fcb0ce8c0f4ed66e26494af3542d8577d46db0635eab70f856bcfa5cd5b83a
-
SHA512
67355344e31aa10a43a5144b711ff48ebe356fc2de4e72a2f7d2c84486ee3c760af6d2b832e1a0bfaa481b6245b54405cf1fe82e36f7ff64790c049ac185588c
-
SSDEEP
12288:IMrry90Ez2aXYBr3PJ1ii/d5sF+gMaTkmNRKCN7q5e52Ds:Ty1z2YYlOHTkmNRKCN7QMas
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-