General
-
Target
7ed6c4e534851e43b7fc844fb59456a71b251857bbfe62fae630cabd5a56e15d
-
Size
558KB
-
Sample
230206-2vhwpsgc59
-
MD5
747c3d62fa5f1ba646fe3f9d357de699
-
SHA1
60232b44a730b712e1ba33e4ead6ea425249e4f1
-
SHA256
7ed6c4e534851e43b7fc844fb59456a71b251857bbfe62fae630cabd5a56e15d
-
SHA512
20ad16d616b76555fae7cbbe9acc7a78d18ad2847abb5687205b623f6704576a1c6ebc36b7e2c580e71535aa1611cfc5c7085adbaaa23766403bab973d08ea6d
-
SSDEEP
12288:wMrIy90RLDcCuzOl8xRy8sF+mMaT0mNRqyaxYH:oy4IHmHT0mNRq8H
Static task
static1
Behavioral task
behavioral1
Sample
7ed6c4e534851e43b7fc844fb59456a71b251857bbfe62fae630cabd5a56e15d.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
7ed6c4e534851e43b7fc844fb59456a71b251857bbfe62fae630cabd5a56e15d
-
Size
558KB
-
MD5
747c3d62fa5f1ba646fe3f9d357de699
-
SHA1
60232b44a730b712e1ba33e4ead6ea425249e4f1
-
SHA256
7ed6c4e534851e43b7fc844fb59456a71b251857bbfe62fae630cabd5a56e15d
-
SHA512
20ad16d616b76555fae7cbbe9acc7a78d18ad2847abb5687205b623f6704576a1c6ebc36b7e2c580e71535aa1611cfc5c7085adbaaa23766403bab973d08ea6d
-
SSDEEP
12288:wMrIy90RLDcCuzOl8xRy8sF+mMaT0mNRqyaxYH:oy4IHmHT0mNRq8H
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-