General
-
Target
226fd8bee1db6ab59862ebbac809e47fd8e94c9b4ba9d53a1362028f0b003d40
-
Size
574KB
-
Sample
230206-tyk68seh27
-
MD5
8adcbeef1fe89bc4e355ef64f7a1eb26
-
SHA1
4d40ef741a2581328097ac6c892c829bc591ead5
-
SHA256
226fd8bee1db6ab59862ebbac809e47fd8e94c9b4ba9d53a1362028f0b003d40
-
SHA512
e8c46702b6c71d545498d3d8254dea4d83be28a82be7481d416c8c3b3a723bb8fdace6c855a411731994a69561c719e69232352e2f9110550d6f3ec123cf6a24
-
SSDEEP
12288:0MrTy90KTk2cH2qVoXkBs/0ttbF7sN0n/t1QWhYzsG:3yK2cxVHBsstXG0n/LhYzsG
Static task
static1
Behavioral task
behavioral1
Sample
226fd8bee1db6ab59862ebbac809e47fd8e94c9b4ba9d53a1362028f0b003d40.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
226fd8bee1db6ab59862ebbac809e47fd8e94c9b4ba9d53a1362028f0b003d40
-
Size
574KB
-
MD5
8adcbeef1fe89bc4e355ef64f7a1eb26
-
SHA1
4d40ef741a2581328097ac6c892c829bc591ead5
-
SHA256
226fd8bee1db6ab59862ebbac809e47fd8e94c9b4ba9d53a1362028f0b003d40
-
SHA512
e8c46702b6c71d545498d3d8254dea4d83be28a82be7481d416c8c3b3a723bb8fdace6c855a411731994a69561c719e69232352e2f9110550d6f3ec123cf6a24
-
SSDEEP
12288:0MrTy90KTk2cH2qVoXkBs/0ttbF7sN0n/t1QWhYzsG:3yK2cxVHBsstXG0n/LhYzsG
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-