General
-
Target
edd48bf8dafd68035e7964d57b54e8ff38fa5543479cae7d25c9a7664cad183a
-
Size
578KB
-
Sample
230206-tbg63ahh8x
-
MD5
9a6e6f7991e41cb2ca2525275fd584a1
-
SHA1
942a0d60e75f6624736eb18ccf5e2f4f2fcb87aa
-
SHA256
edd48bf8dafd68035e7964d57b54e8ff38fa5543479cae7d25c9a7664cad183a
-
SHA512
2a15dac4938532f691bbcf32a3e5eb4b9c325aabe817055b1a66ecb2de61130dacf02d00de077fea3f267cc2745c2cf13bb89ca0fb15f9a9d68ea34dbe223180
-
SSDEEP
12288:PMrmy90lri8MrMDgqgiBwCQdVEEnU98aZ8qgySspXifmMs4p:1yhzriz9BwCm6EnUbgFso7fp
Static task
static1
Behavioral task
behavioral1
Sample
edd48bf8dafd68035e7964d57b54e8ff38fa5543479cae7d25c9a7664cad183a.exe
Resource
win10-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
edd48bf8dafd68035e7964d57b54e8ff38fa5543479cae7d25c9a7664cad183a
-
Size
578KB
-
MD5
9a6e6f7991e41cb2ca2525275fd584a1
-
SHA1
942a0d60e75f6624736eb18ccf5e2f4f2fcb87aa
-
SHA256
edd48bf8dafd68035e7964d57b54e8ff38fa5543479cae7d25c9a7664cad183a
-
SHA512
2a15dac4938532f691bbcf32a3e5eb4b9c325aabe817055b1a66ecb2de61130dacf02d00de077fea3f267cc2745c2cf13bb89ca0fb15f9a9d68ea34dbe223180
-
SSDEEP
12288:PMrmy90lri8MrMDgqgiBwCQdVEEnU98aZ8qgySspXifmMs4p:1yhzriz9BwCm6EnUbgFso7fp
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-