General
-
Target
df6ad2ff09c8fdce7e78169ac378caf8c43f15d491317166a919fe0fe52df03d
-
Size
574KB
-
Sample
230206-whwzxaad6z
-
MD5
5248a72b13a73cd6486a64aa105b65dd
-
SHA1
539705911371912165b96e40b40c8d00ce39e816
-
SHA256
df6ad2ff09c8fdce7e78169ac378caf8c43f15d491317166a919fe0fe52df03d
-
SHA512
ea375fed7179aa28e74c6c3ac479b12fe3ce2f5887042893f8550420a342be37b4baae8c3d5fdfad17106aaeebbedb4c0e5d88f87254fb834718bd00fc97ee32
-
SSDEEP
12288:ZMrLy906EVmlzQnSM/09tfFLQN0n/tN2OKkqQ:+yO0RxMs9/i0n/QG
Static task
static1
Behavioral task
behavioral1
Sample
df6ad2ff09c8fdce7e78169ac378caf8c43f15d491317166a919fe0fe52df03d.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
df6ad2ff09c8fdce7e78169ac378caf8c43f15d491317166a919fe0fe52df03d
-
Size
574KB
-
MD5
5248a72b13a73cd6486a64aa105b65dd
-
SHA1
539705911371912165b96e40b40c8d00ce39e816
-
SHA256
df6ad2ff09c8fdce7e78169ac378caf8c43f15d491317166a919fe0fe52df03d
-
SHA512
ea375fed7179aa28e74c6c3ac479b12fe3ce2f5887042893f8550420a342be37b4baae8c3d5fdfad17106aaeebbedb4c0e5d88f87254fb834718bd00fc97ee32
-
SSDEEP
12288:ZMrLy906EVmlzQnSM/09tfFLQN0n/tN2OKkqQ:+yO0RxMs9/i0n/QG
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-