General
-
Target
fbe8ce98942a72d29fba4959b35d65c7986cf9d5b773bc03a7bcf989f10c484e
-
Size
557KB
-
Sample
230206-x6crlsag6t
-
MD5
e7f9ef3d5e20273e86e69a31761de2ca
-
SHA1
b21d31b193a8e5f7acadad51e58a9fe025668133
-
SHA256
fbe8ce98942a72d29fba4959b35d65c7986cf9d5b773bc03a7bcf989f10c484e
-
SHA512
b9a9cb2f9bfcba9d5c60f0f53b076bd7b9eea51ec1fce48085df6eeb07e3dbbf650fdfe6fc3cb0289bd0438e7bf7e2b40eef1c6286f7a09b4c2d3c72f27540ef
-
SSDEEP
12288:+Mrzy90EJocKDGps79DglltIGx57tUK6uYCvSTG53Vpaey+bVnKmzzunKN0rR/:1y7fab9DgVfrDHvielJzd0rJ
Static task
static1
Behavioral task
behavioral1
Sample
fbe8ce98942a72d29fba4959b35d65c7986cf9d5b773bc03a7bcf989f10c484e.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
fbe8ce98942a72d29fba4959b35d65c7986cf9d5b773bc03a7bcf989f10c484e
-
Size
557KB
-
MD5
e7f9ef3d5e20273e86e69a31761de2ca
-
SHA1
b21d31b193a8e5f7acadad51e58a9fe025668133
-
SHA256
fbe8ce98942a72d29fba4959b35d65c7986cf9d5b773bc03a7bcf989f10c484e
-
SHA512
b9a9cb2f9bfcba9d5c60f0f53b076bd7b9eea51ec1fce48085df6eeb07e3dbbf650fdfe6fc3cb0289bd0438e7bf7e2b40eef1c6286f7a09b4c2d3c72f27540ef
-
SSDEEP
12288:+Mrzy90EJocKDGps79DglltIGx57tUK6uYCvSTG53Vpaey+bVnKmzzunKN0rR/:1y7fab9DgVfrDHvielJzd0rJ
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-