General
-
Target
d05b0cde78fb81ba435c461070353520a959a90900f978bdcdcfbbafe53c7ae1
-
Size
574KB
-
Sample
230206-vbrwyaeh78
-
MD5
70c0f4b6f796c93c361bd0a8d7ca8c22
-
SHA1
b9f71f3cb186d974373e85be74b67a929b540186
-
SHA256
d05b0cde78fb81ba435c461070353520a959a90900f978bdcdcfbbafe53c7ae1
-
SHA512
a6bb5e4ed22ab3e994ffac72d53303ef873b5c40438eb2add1dab764dd510f8f0fe8e995c34e3cdc5a7c893ead3d9620b938c308c9a9afd7660ca0110f09bed9
-
SSDEEP
12288:kMr9y90yP9wVVD31cMmZGp/0ttOFqLN0n/tcE0Mw4QV:xyVVgVDlmZGpstv50n/9e5V
Static task
static1
Behavioral task
behavioral1
Sample
d05b0cde78fb81ba435c461070353520a959a90900f978bdcdcfbbafe53c7ae1.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
d05b0cde78fb81ba435c461070353520a959a90900f978bdcdcfbbafe53c7ae1
-
Size
574KB
-
MD5
70c0f4b6f796c93c361bd0a8d7ca8c22
-
SHA1
b9f71f3cb186d974373e85be74b67a929b540186
-
SHA256
d05b0cde78fb81ba435c461070353520a959a90900f978bdcdcfbbafe53c7ae1
-
SHA512
a6bb5e4ed22ab3e994ffac72d53303ef873b5c40438eb2add1dab764dd510f8f0fe8e995c34e3cdc5a7c893ead3d9620b938c308c9a9afd7660ca0110f09bed9
-
SSDEEP
12288:kMr9y90yP9wVVD31cMmZGp/0ttOFqLN0n/tcE0Mw4QV:xyVVgVDlmZGpstv50n/9e5V
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-