General
-
Target
870623be2fa10fa1964192b3cbd823ffcbed5e04f3a304d28b2e72a6b2602a31
-
Size
558KB
-
Sample
230206-w7xyhafc75
-
MD5
6de240dc105b5057b10a5f1e55cd5a38
-
SHA1
c255d452051bb4697aba796ecbc91b76abf46a49
-
SHA256
870623be2fa10fa1964192b3cbd823ffcbed5e04f3a304d28b2e72a6b2602a31
-
SHA512
c565002e72a50a18cd4a6f5c5a7fbc5f45d0d1d4db7c359f529ba30a43f824d9ead6308b77f0047652afb130e5a734f83e2f6bc74d13b526ace8881026049cfa
-
SSDEEP
12288:NMrPy90zPCnwNBmkbeLsMdx7GiVmqSLOZdtf:SyKCnYVqLLrKiARLOZdtf
Static task
static1
Behavioral task
behavioral1
Sample
870623be2fa10fa1964192b3cbd823ffcbed5e04f3a304d28b2e72a6b2602a31.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
870623be2fa10fa1964192b3cbd823ffcbed5e04f3a304d28b2e72a6b2602a31
-
Size
558KB
-
MD5
6de240dc105b5057b10a5f1e55cd5a38
-
SHA1
c255d452051bb4697aba796ecbc91b76abf46a49
-
SHA256
870623be2fa10fa1964192b3cbd823ffcbed5e04f3a304d28b2e72a6b2602a31
-
SHA512
c565002e72a50a18cd4a6f5c5a7fbc5f45d0d1d4db7c359f529ba30a43f824d9ead6308b77f0047652afb130e5a734f83e2f6bc74d13b526ace8881026049cfa
-
SSDEEP
12288:NMrPy90zPCnwNBmkbeLsMdx7GiVmqSLOZdtf:SyKCnYVqLLrKiARLOZdtf
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-