General
-
Target
ccdc778e81f68c0ae42888ad9f63ecd9d23920a46da7118539b4f8a0c05a952f
-
Size
578KB
-
Sample
230206-tdn3dsaa2s
-
MD5
0eb351d8607734cddab2532e735ea3a6
-
SHA1
aea0ed52657e82549296d130621a22d4ccba719a
-
SHA256
ccdc778e81f68c0ae42888ad9f63ecd9d23920a46da7118539b4f8a0c05a952f
-
SHA512
efdfe4b35707e5db1bf561291fd2ca6898eee0c50b34706c141bdc6e45e6f20c49c251b2e298b08075ca31984221af9ed3ffc060961de71c89a315600d2ed15f
-
SSDEEP
12288:6Mrky90D0jlbAZjm7pYYpIHZ+nU98aF8qgySsp7ifRPi7iuhJZw:WyLpT7pYYpA+nUPgFsc87i8O
Static task
static1
Behavioral task
behavioral1
Sample
ccdc778e81f68c0ae42888ad9f63ecd9d23920a46da7118539b4f8a0c05a952f.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
ccdc778e81f68c0ae42888ad9f63ecd9d23920a46da7118539b4f8a0c05a952f
-
Size
578KB
-
MD5
0eb351d8607734cddab2532e735ea3a6
-
SHA1
aea0ed52657e82549296d130621a22d4ccba719a
-
SHA256
ccdc778e81f68c0ae42888ad9f63ecd9d23920a46da7118539b4f8a0c05a952f
-
SHA512
efdfe4b35707e5db1bf561291fd2ca6898eee0c50b34706c141bdc6e45e6f20c49c251b2e298b08075ca31984221af9ed3ffc060961de71c89a315600d2ed15f
-
SSDEEP
12288:6Mrky90D0jlbAZjm7pYYpIHZ+nU98aF8qgySsp7ifRPi7iuhJZw:WyLpT7pYYpA+nUPgFsc87i8O
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-