General
-
Target
1934a126f2707499b9fa14e3cc3e328bd94411ceb502ac0314169dad88903d0b
-
Size
558KB
-
Sample
230206-2zkabsbe5w
-
MD5
2b06137d8b7463da365ba05cb74fe04d
-
SHA1
027b429b7f378f6cc45b6d34b018a9ae20e4b5b1
-
SHA256
1934a126f2707499b9fa14e3cc3e328bd94411ceb502ac0314169dad88903d0b
-
SHA512
40b05944127fa901c2031f0aee71ab428a60eb63ba10df1e89854938ecb1b83387c4e490a416faa5696b09bcd2cabbfd13ac03d87e79846348308d0ec833aa3c
-
SSDEEP
12288:MMrgy90kPxgj7QHyEPVsF+oMaTSmNRgz/rR5std:0yRPxIczsHTSmNRgz/rfKd
Static task
static1
Behavioral task
behavioral1
Sample
1934a126f2707499b9fa14e3cc3e328bd94411ceb502ac0314169dad88903d0b.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
1934a126f2707499b9fa14e3cc3e328bd94411ceb502ac0314169dad88903d0b
-
Size
558KB
-
MD5
2b06137d8b7463da365ba05cb74fe04d
-
SHA1
027b429b7f378f6cc45b6d34b018a9ae20e4b5b1
-
SHA256
1934a126f2707499b9fa14e3cc3e328bd94411ceb502ac0314169dad88903d0b
-
SHA512
40b05944127fa901c2031f0aee71ab428a60eb63ba10df1e89854938ecb1b83387c4e490a416faa5696b09bcd2cabbfd13ac03d87e79846348308d0ec833aa3c
-
SSDEEP
12288:MMrgy90kPxgj7QHyEPVsF+oMaTSmNRgz/rR5std:0yRPxIczsHTSmNRgz/rfKd
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-