General
-
Target
e368a311becac98d70bb0f34486ed8b15b9366b917640eafb92b91d42db08f12
-
Size
585KB
-
Sample
230206-m2pv9sde95
-
MD5
5b25d91956363fc2887d91debdfe3bd0
-
SHA1
8d40df5f677813528b0096d9a2a07628a04d35bd
-
SHA256
e368a311becac98d70bb0f34486ed8b15b9366b917640eafb92b91d42db08f12
-
SHA512
62c3d4afdaf7d15afbf5c2c4b16200e90a8768eb8734b904dd74f521649ef7dfa25cf8be39a72fb84ef17874412109a4b07eb33aba034f0e25c5ef5958db26ab
-
SSDEEP
12288:JMrpy90cGmzkJV7hljp7axf4HI1hN29Ay1PqiI8zP7Y3MZU26:QyLGmzwVd9p7ofoOb29ASqj8zPUS6
Static task
static1
Behavioral task
behavioral1
Sample
e368a311becac98d70bb0f34486ed8b15b9366b917640eafb92b91d42db08f12.exe
Resource
win10v2004-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
e368a311becac98d70bb0f34486ed8b15b9366b917640eafb92b91d42db08f12
-
Size
585KB
-
MD5
5b25d91956363fc2887d91debdfe3bd0
-
SHA1
8d40df5f677813528b0096d9a2a07628a04d35bd
-
SHA256
e368a311becac98d70bb0f34486ed8b15b9366b917640eafb92b91d42db08f12
-
SHA512
62c3d4afdaf7d15afbf5c2c4b16200e90a8768eb8734b904dd74f521649ef7dfa25cf8be39a72fb84ef17874412109a4b07eb33aba034f0e25c5ef5958db26ab
-
SSDEEP
12288:JMrpy90cGmzkJV7hljp7axf4HI1hN29Ay1PqiI8zP7Y3MZU26:QyLGmzwVd9p7ofoOb29ASqj8zPUS6
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-