General
-
Target
96ddac11b68368e13069179a80415e3294bdaaa3e2c352d1c4da4250332ea708
-
Size
573KB
-
Sample
230206-vdqrnaeh93
-
MD5
579fe5508718fe028fbe3de50ea1301c
-
SHA1
0cc42e11b4860e288cadd0d1c7cf15873cb45d36
-
SHA256
96ddac11b68368e13069179a80415e3294bdaaa3e2c352d1c4da4250332ea708
-
SHA512
f9e95b5aed0ce647b494f127f10f95fe58f3f1beb3e9e49a83ca65e0378482251f5054baae8831cb6d0f05ea46def2014250a75d9a6932254b636b51dd76e579
-
SSDEEP
12288:GMray90RZVGYdYtwV4zIwT/0VtEFOYN0n/tLD1VJ4:symVG2iwVaIwTsVXK0n/t+
Static task
static1
Behavioral task
behavioral1
Sample
96ddac11b68368e13069179a80415e3294bdaaa3e2c352d1c4da4250332ea708.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
96ddac11b68368e13069179a80415e3294bdaaa3e2c352d1c4da4250332ea708
-
Size
573KB
-
MD5
579fe5508718fe028fbe3de50ea1301c
-
SHA1
0cc42e11b4860e288cadd0d1c7cf15873cb45d36
-
SHA256
96ddac11b68368e13069179a80415e3294bdaaa3e2c352d1c4da4250332ea708
-
SHA512
f9e95b5aed0ce647b494f127f10f95fe58f3f1beb3e9e49a83ca65e0378482251f5054baae8831cb6d0f05ea46def2014250a75d9a6932254b636b51dd76e579
-
SSDEEP
12288:GMray90RZVGYdYtwV4zIwT/0VtEFOYN0n/tLD1VJ4:symVG2iwVaIwTsVXK0n/t+
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-