General
-
Target
be71a1656142f84b9e3dffa58af6960c645b4a9745d2ad785e34d071370d9472
-
Size
574KB
-
Sample
230206-vwxmxsac6v
-
MD5
93dfdfe0e6ecdf6f67fa5baba4ae1204
-
SHA1
04d3d239735b221a04a5c60761a78fd66f208220
-
SHA256
be71a1656142f84b9e3dffa58af6960c645b4a9745d2ad785e34d071370d9472
-
SHA512
291e105234744b39d3438ce58f7022f8f9c18114408a351e9cfe7feebdd3a8dc9dd00b0c6ecd6d28d2b2a78726922bbd1935137bfe52ebfef453bed3164a8249
-
SSDEEP
12288:dMrjy902D7ZIg8if/0ltHFzLN0n/tkrpk2n/YD7R:2y3FIgVslr50n/2rv/S
Static task
static1
Behavioral task
behavioral1
Sample
be71a1656142f84b9e3dffa58af6960c645b4a9745d2ad785e34d071370d9472.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
be71a1656142f84b9e3dffa58af6960c645b4a9745d2ad785e34d071370d9472
-
Size
574KB
-
MD5
93dfdfe0e6ecdf6f67fa5baba4ae1204
-
SHA1
04d3d239735b221a04a5c60761a78fd66f208220
-
SHA256
be71a1656142f84b9e3dffa58af6960c645b4a9745d2ad785e34d071370d9472
-
SHA512
291e105234744b39d3438ce58f7022f8f9c18114408a351e9cfe7feebdd3a8dc9dd00b0c6ecd6d28d2b2a78726922bbd1935137bfe52ebfef453bed3164a8249
-
SSDEEP
12288:dMrjy902D7ZIg8if/0ltHFzLN0n/tkrpk2n/YD7R:2y3FIgVslr50n/2rv/S
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-