General
-
Target
7596e5fb7ed87a05caad0c678228c0950221e028bc78918916e57b48dfdc847e
-
Size
577KB
-
Sample
230206-r81zbsed98
-
MD5
384f4b21c6f9bf3de48b516b0440397e
-
SHA1
2e0d9b47762b65c94e38e4019cec891683c599bf
-
SHA256
7596e5fb7ed87a05caad0c678228c0950221e028bc78918916e57b48dfdc847e
-
SHA512
316666a02a633a613a607b4a092addd122769c75a2413cdbdb13054e461477ef792c72134164517d1fdcdcc389e20477229c7cfae3cd1ab2b74d55adf4ab6413
-
SSDEEP
12288:cMrXy90dSVpL5JSbFgDPJaayoSFVKqGUDvizF1Q4:zyrpLw8P4Ya5GmI1Q4
Static task
static1
Behavioral task
behavioral1
Sample
7596e5fb7ed87a05caad0c678228c0950221e028bc78918916e57b48dfdc847e.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
7596e5fb7ed87a05caad0c678228c0950221e028bc78918916e57b48dfdc847e
-
Size
577KB
-
MD5
384f4b21c6f9bf3de48b516b0440397e
-
SHA1
2e0d9b47762b65c94e38e4019cec891683c599bf
-
SHA256
7596e5fb7ed87a05caad0c678228c0950221e028bc78918916e57b48dfdc847e
-
SHA512
316666a02a633a613a607b4a092addd122769c75a2413cdbdb13054e461477ef792c72134164517d1fdcdcc389e20477229c7cfae3cd1ab2b74d55adf4ab6413
-
SSDEEP
12288:cMrXy90dSVpL5JSbFgDPJaayoSFVKqGUDvizF1Q4:zyrpLw8P4Ya5GmI1Q4
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-