General
-
Target
417323a85a32ec0f6955a7de1ae64c4332d4814ab7f41852bba70d11eaaeb179
-
Size
574KB
-
Sample
230206-wbsznsad3y
-
MD5
dec8a1cfbf9013cc7fe63233a4f309e3
-
SHA1
683e2bde66b677711e2c293496be7a0ba6b33550
-
SHA256
417323a85a32ec0f6955a7de1ae64c4332d4814ab7f41852bba70d11eaaeb179
-
SHA512
8446742d26e5557f0655d8d9952697671fc74996c43445fe427be5241cee72cb8cc91106745cf8eb55ad769ad600e57b941493842ec4851691c78d367dd955a7
-
SSDEEP
12288:hMrBy90qIWDfrxnT0Hap5Y/0ltHFz7N0n/tRMeTeM2:wylIWDfrpME5Yslrp0n/HMTM2
Static task
static1
Behavioral task
behavioral1
Sample
417323a85a32ec0f6955a7de1ae64c4332d4814ab7f41852bba70d11eaaeb179.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
417323a85a32ec0f6955a7de1ae64c4332d4814ab7f41852bba70d11eaaeb179
-
Size
574KB
-
MD5
dec8a1cfbf9013cc7fe63233a4f309e3
-
SHA1
683e2bde66b677711e2c293496be7a0ba6b33550
-
SHA256
417323a85a32ec0f6955a7de1ae64c4332d4814ab7f41852bba70d11eaaeb179
-
SHA512
8446742d26e5557f0655d8d9952697671fc74996c43445fe427be5241cee72cb8cc91106745cf8eb55ad769ad600e57b941493842ec4851691c78d367dd955a7
-
SSDEEP
12288:hMrBy90qIWDfrxnT0Hap5Y/0ltHFz7N0n/tRMeTeM2:wylIWDfrpME5Yslrp0n/HMTM2
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-