General
-
Target
5158b62c2412128e2ff61e50d4657b7adf62b262454b1a19dce22be6ad85b242
-
Size
574KB
-
Sample
230206-trsbzaeg78
-
MD5
0bf0d8aaf8c80dd0fa5d323b35eff77b
-
SHA1
79db05284d0b809925ff85cf711e3633a7ab19bd
-
SHA256
5158b62c2412128e2ff61e50d4657b7adf62b262454b1a19dce22be6ad85b242
-
SHA512
9d28893a7ab4b8fb46c7f04337710fcca348594b05d549a58d04d277efc587ad7124a6a0945c00981bb6084f1aef6318b715448c863dfe64583513f0dc529cb2
-
SSDEEP
12288:iMrpy90VeUdtJSl1jeZhk5VJKJWK6eAUOH7bTftmTj/j:ryceykSZOF8A3HbftmTbj
Static task
static1
Behavioral task
behavioral1
Sample
5158b62c2412128e2ff61e50d4657b7adf62b262454b1a19dce22be6ad85b242.exe
Resource
win10-20220812-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
5158b62c2412128e2ff61e50d4657b7adf62b262454b1a19dce22be6ad85b242
-
Size
574KB
-
MD5
0bf0d8aaf8c80dd0fa5d323b35eff77b
-
SHA1
79db05284d0b809925ff85cf711e3633a7ab19bd
-
SHA256
5158b62c2412128e2ff61e50d4657b7adf62b262454b1a19dce22be6ad85b242
-
SHA512
9d28893a7ab4b8fb46c7f04337710fcca348594b05d549a58d04d277efc587ad7124a6a0945c00981bb6084f1aef6318b715448c863dfe64583513f0dc529cb2
-
SSDEEP
12288:iMrpy90VeUdtJSl1jeZhk5VJKJWK6eAUOH7bTftmTj/j:ryceykSZOF8A3HbftmTbj
Score10/10-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-