General
-
Target
ec71c9a6e45cb7f65859e8fbdf0190348c9b9c9e039bf65fdedf0bb23b7db374
-
Size
558KB
-
Sample
230206-3vrdhsgd99
-
MD5
9d690bf02cf3e4cf8100c350f66a9e0e
-
SHA1
466616cd9440f675755b5cec2955cb2696d619b6
-
SHA256
ec71c9a6e45cb7f65859e8fbdf0190348c9b9c9e039bf65fdedf0bb23b7db374
-
SHA512
c01cfcc14308d196513e2debeb5e96de0157a5fafee80c4e5dfae172e5995d969d61f887f632bccf6ec6c8823fd1ac9ac8bfd19a141196f0fd3ad26d9f3ac78e
-
SSDEEP
12288:GMrHy90TLBP3926eAH62kCqjjcRG0ZRBjJzEnE:ZyMvc89BqjuZB2E
Static task
static1
Behavioral task
behavioral1
Sample
ec71c9a6e45cb7f65859e8fbdf0190348c9b9c9e039bf65fdedf0bb23b7db374.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
ec71c9a6e45cb7f65859e8fbdf0190348c9b9c9e039bf65fdedf0bb23b7db374
-
Size
558KB
-
MD5
9d690bf02cf3e4cf8100c350f66a9e0e
-
SHA1
466616cd9440f675755b5cec2955cb2696d619b6
-
SHA256
ec71c9a6e45cb7f65859e8fbdf0190348c9b9c9e039bf65fdedf0bb23b7db374
-
SHA512
c01cfcc14308d196513e2debeb5e96de0157a5fafee80c4e5dfae172e5995d969d61f887f632bccf6ec6c8823fd1ac9ac8bfd19a141196f0fd3ad26d9f3ac78e
-
SSDEEP
12288:GMrHy90TLBP3926eAH62kCqjjcRG0ZRBjJzEnE:ZyMvc89BqjuZB2E
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-