General
-
Target
b7b0e21a44f73a7d1797d49372287a14936b9d0e19804eb3950cdc345709f181
-
Size
574KB
-
Sample
230206-twnvcaaa9t
-
MD5
e10c1b4ca141cea8fa28d7f6586d8b26
-
SHA1
f4c95c0041186f443c24443077a475af10b65d05
-
SHA256
b7b0e21a44f73a7d1797d49372287a14936b9d0e19804eb3950cdc345709f181
-
SHA512
a1b3b91c7653c2c9cae1644f9e49195936f6ecfefb99c2615fc72bf98896228927a883facd63223c8c3e8701fd85056a88aa4d56dfdc01552d8b1c27ce9f9060
-
SSDEEP
12288:hMrsy90nO6wVH9BmRYT/0ttOFqsN0n/tY406KBdX:5yzVdBdTstvG0n/t06KdX
Static task
static1
Behavioral task
behavioral1
Sample
b7b0e21a44f73a7d1797d49372287a14936b9d0e19804eb3950cdc345709f181.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
b7b0e21a44f73a7d1797d49372287a14936b9d0e19804eb3950cdc345709f181
-
Size
574KB
-
MD5
e10c1b4ca141cea8fa28d7f6586d8b26
-
SHA1
f4c95c0041186f443c24443077a475af10b65d05
-
SHA256
b7b0e21a44f73a7d1797d49372287a14936b9d0e19804eb3950cdc345709f181
-
SHA512
a1b3b91c7653c2c9cae1644f9e49195936f6ecfefb99c2615fc72bf98896228927a883facd63223c8c3e8701fd85056a88aa4d56dfdc01552d8b1c27ce9f9060
-
SSDEEP
12288:hMrsy90nO6wVH9BmRYT/0ttOFqsN0n/tY406KBdX:5yzVdBdTstvG0n/t06KdX
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-