General
-
Target
6cf485441aeb75ec4e7dfd7595da66e133a07e9e9667fea69ee14f6d6da3d7f1
-
Size
558KB
-
Sample
230206-3nsyrsgd67
-
MD5
cc45bf48462a23a7f1230b70a56094f4
-
SHA1
21a628f2a8c395cb7c913394075c1075e88c4720
-
SHA256
6cf485441aeb75ec4e7dfd7595da66e133a07e9e9667fea69ee14f6d6da3d7f1
-
SHA512
202f830701b56c46728eb4ae0dcb4534318ae830c99ebe04d9d440a07e26e4ec315f0a4ce4cde743236af1857b149c5bd55094e7bbe82f77f05247295237bf90
-
SSDEEP
12288:sMrBy90ZHuO03acZBhlfqjjsRG0UKnbjcU:NymOO03a4fqjuUscU
Static task
static1
Behavioral task
behavioral1
Sample
6cf485441aeb75ec4e7dfd7595da66e133a07e9e9667fea69ee14f6d6da3d7f1.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
6cf485441aeb75ec4e7dfd7595da66e133a07e9e9667fea69ee14f6d6da3d7f1
-
Size
558KB
-
MD5
cc45bf48462a23a7f1230b70a56094f4
-
SHA1
21a628f2a8c395cb7c913394075c1075e88c4720
-
SHA256
6cf485441aeb75ec4e7dfd7595da66e133a07e9e9667fea69ee14f6d6da3d7f1
-
SHA512
202f830701b56c46728eb4ae0dcb4534318ae830c99ebe04d9d440a07e26e4ec315f0a4ce4cde743236af1857b149c5bd55094e7bbe82f77f05247295237bf90
-
SSDEEP
12288:sMrBy90ZHuO03acZBhlfqjjsRG0UKnbjcU:NymOO03a4fqjuUscU
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-