General
-
Target
46c5314e0d3dd32565306a004cbe7c85a21d1859dbb9c5853777577fe708b10b
-
Size
558KB
-
Sample
230206-3lrmxsgd58
-
MD5
f111fddc8c6963f26995e9d72edb7e97
-
SHA1
7758770b3041b32030789a1e85bdb0ea61f963c7
-
SHA256
46c5314e0d3dd32565306a004cbe7c85a21d1859dbb9c5853777577fe708b10b
-
SHA512
bcff54fca15fad45c56265076cf2ae1c0eea3b587cc14ee172afbd9fef037bfecc830e39290f16335e52a6ec7f70d61f537f7039c0695ddc641f91beb5de3402
-
SSDEEP
6144:Kwy+bnr+Xp0yN90QEOY0Qii2g2rL+EqWI16bO/2kucjSwYh3i/j/bqkdKjRXDqe5:cMr3y90Mnw2fr8YPsj2qjDIRG0nqE9
Static task
static1
Behavioral task
behavioral1
Sample
46c5314e0d3dd32565306a004cbe7c85a21d1859dbb9c5853777577fe708b10b.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
46c5314e0d3dd32565306a004cbe7c85a21d1859dbb9c5853777577fe708b10b
-
Size
558KB
-
MD5
f111fddc8c6963f26995e9d72edb7e97
-
SHA1
7758770b3041b32030789a1e85bdb0ea61f963c7
-
SHA256
46c5314e0d3dd32565306a004cbe7c85a21d1859dbb9c5853777577fe708b10b
-
SHA512
bcff54fca15fad45c56265076cf2ae1c0eea3b587cc14ee172afbd9fef037bfecc830e39290f16335e52a6ec7f70d61f537f7039c0695ddc641f91beb5de3402
-
SSDEEP
6144:Kwy+bnr+Xp0yN90QEOY0Qii2g2rL+EqWI16bO/2kucjSwYh3i/j/bqkdKjRXDqe5:cMr3y90Mnw2fr8YPsj2qjDIRG0nqE9
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-