General
-
Target
file.exe
-
Size
574KB
-
Sample
230206-tk7s3saa31
-
MD5
e806c1d0e9ff7faab3b856beae8e07e6
-
SHA1
0443f8724eca91059443b4b9e7a1e6e40d39de87
-
SHA256
12bdc7c780c21d245ef142f764c9ed71605cdefe8c35f91253d5ac4adff59a38
-
SHA512
2abc31945040d2bf4d50a6cb88964d345ef2635a0f66c9fe2520b57cf94348558ac07848481b36f28caa31855953c0974742e514a4ab1c4192c49852f0cb8921
-
SSDEEP
12288:1Mr5y90uT5UP9ryzUJyJWKyeAUOH7MkfW3i1NH:Myk9rKUVUA3H9fe8
Static task
static1
Behavioral task
behavioral1
Sample
file.exe
Resource
win7-20220812-en
Behavioral task
behavioral2
Sample
file.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
file.exe
-
Size
574KB
-
MD5
e806c1d0e9ff7faab3b856beae8e07e6
-
SHA1
0443f8724eca91059443b4b9e7a1e6e40d39de87
-
SHA256
12bdc7c780c21d245ef142f764c9ed71605cdefe8c35f91253d5ac4adff59a38
-
SHA512
2abc31945040d2bf4d50a6cb88964d345ef2635a0f66c9fe2520b57cf94348558ac07848481b36f28caa31855953c0974742e514a4ab1c4192c49852f0cb8921
-
SSDEEP
12288:1Mr5y90uT5UP9ryzUJyJWKyeAUOH7MkfW3i1NH:Myk9rKUVUA3H9fe8
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-