General
-
Target
1b1e2d2092e33f496693ef124470d910d7221110cb6c85f6731267b3f617f69b
-
Size
558KB
-
Sample
230206-3jlznabe9w
-
MD5
c32e8758e48cf1b74d0e5dfd26000cf4
-
SHA1
1365377705fa6cd73c8256e9cbdd0ee16fde18dd
-
SHA256
1b1e2d2092e33f496693ef124470d910d7221110cb6c85f6731267b3f617f69b
-
SHA512
00132eccd410b494bfc5094e05757de53fad4825be1ef612482acfbb24ed78c50241e46cf1fa765e2ea41d369333435add540eb85c6969fe00f07f422c5b1a72
-
SSDEEP
12288:XMrsy90eKMGE75bYa4Xoe2boWqj+/RG0BETmhqPyJO:XybKMGE75caCv2EWqjqBzAPyg
Static task
static1
Behavioral task
behavioral1
Sample
1b1e2d2092e33f496693ef124470d910d7221110cb6c85f6731267b3f617f69b.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
1b1e2d2092e33f496693ef124470d910d7221110cb6c85f6731267b3f617f69b
-
Size
558KB
-
MD5
c32e8758e48cf1b74d0e5dfd26000cf4
-
SHA1
1365377705fa6cd73c8256e9cbdd0ee16fde18dd
-
SHA256
1b1e2d2092e33f496693ef124470d910d7221110cb6c85f6731267b3f617f69b
-
SHA512
00132eccd410b494bfc5094e05757de53fad4825be1ef612482acfbb24ed78c50241e46cf1fa765e2ea41d369333435add540eb85c6969fe00f07f422c5b1a72
-
SSDEEP
12288:XMrsy90eKMGE75bYa4Xoe2boWqj+/RG0BETmhqPyJO:XybKMGE75caCv2EWqjqBzAPyg
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-