General
-
Target
bbc41945612f7a3d0f8cfd23721a7a2c1e4c19800d40eb37c87a6b97afd1c25d
-
Size
558KB
-
Sample
230206-ww1j9afc45
-
MD5
587c13130fc6dd8fcc28f306775a9345
-
SHA1
1dfd5ffd97936eae022553b96eb4ba68a88628b4
-
SHA256
bbc41945612f7a3d0f8cfd23721a7a2c1e4c19800d40eb37c87a6b97afd1c25d
-
SHA512
70b7780895aa072661b1bc62a71360bcf1b82877b7693a4d37c3adde0dadad15ecbe7ed95fd9e034173f155218ff4188d278ed3e756d37eece98d023a401797e
-
SSDEEP
12288:cMr9y90X7xgBKPO1qcwsMdx78izmqKWAyVJWv4qN3:Jy27xggO1qcwLrIiafmWhN3
Static task
static1
Behavioral task
behavioral1
Sample
bbc41945612f7a3d0f8cfd23721a7a2c1e4c19800d40eb37c87a6b97afd1c25d.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
bbc41945612f7a3d0f8cfd23721a7a2c1e4c19800d40eb37c87a6b97afd1c25d
-
Size
558KB
-
MD5
587c13130fc6dd8fcc28f306775a9345
-
SHA1
1dfd5ffd97936eae022553b96eb4ba68a88628b4
-
SHA256
bbc41945612f7a3d0f8cfd23721a7a2c1e4c19800d40eb37c87a6b97afd1c25d
-
SHA512
70b7780895aa072661b1bc62a71360bcf1b82877b7693a4d37c3adde0dadad15ecbe7ed95fd9e034173f155218ff4188d278ed3e756d37eece98d023a401797e
-
SSDEEP
12288:cMr9y90X7xgBKPO1qcwsMdx78izmqKWAyVJWv4qN3:Jy27xggO1qcwLrIiafmWhN3
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-