General
-
Target
6403faf4cbc434cff50b3256f3258a0fe89207429bab0fcbd680d37d4f137028
-
Size
558KB
-
Sample
230206-w3vmksae5s
-
MD5
5c8db9a9ee8b214d1552a2480455eaa8
-
SHA1
db9ae360a4beb5fd242cf27d216bc2377b69bed8
-
SHA256
6403faf4cbc434cff50b3256f3258a0fe89207429bab0fcbd680d37d4f137028
-
SHA512
916c235003175c1a2882a73cc98a564c9860ebb8bff1f9b972350462336c34147fe966374f4b2052d9049e7bf344c8bab4bd0a8cecf3d5e298bdc6370f7c4a90
-
SSDEEP
12288:cMrKy90dDgMBvT5Jkqu5lJ3sMdx7AismqLcMk1:2y0cMBvT5ulVLrciB2a1
Static task
static1
Behavioral task
behavioral1
Sample
6403faf4cbc434cff50b3256f3258a0fe89207429bab0fcbd680d37d4f137028.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
6403faf4cbc434cff50b3256f3258a0fe89207429bab0fcbd680d37d4f137028
-
Size
558KB
-
MD5
5c8db9a9ee8b214d1552a2480455eaa8
-
SHA1
db9ae360a4beb5fd242cf27d216bc2377b69bed8
-
SHA256
6403faf4cbc434cff50b3256f3258a0fe89207429bab0fcbd680d37d4f137028
-
SHA512
916c235003175c1a2882a73cc98a564c9860ebb8bff1f9b972350462336c34147fe966374f4b2052d9049e7bf344c8bab4bd0a8cecf3d5e298bdc6370f7c4a90
-
SSDEEP
12288:cMrKy90dDgMBvT5Jkqu5lJ3sMdx7AismqLcMk1:2y0cMBvT5ulVLrciB2a1
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-