General
-
Target
8924362dcb28df464c0d6f75d8b0cb9ff61de853b265973a7992554c7ca48939
-
Size
558KB
-
Sample
230206-y37y1sfg39
-
MD5
26a784cbc079122907e700061721c1b0
-
SHA1
4ab34e4bbf1df82480348212b5be1831a04c8588
-
SHA256
8924362dcb28df464c0d6f75d8b0cb9ff61de853b265973a7992554c7ca48939
-
SHA512
accc55527cc8d640b0dd8ebbe01724e41d375c5a84dbf7b2e3811b131dec32b1ad5dc3c834fbc123f8a1e99e88fbcdd3a2ea15008a43e543c94761cb67e4b014
-
SSDEEP
12288:vMr6y90ZxMh1q/wjWXGsF+mMaT0mNR+bqI:pySRnXHT0mNR+bN
Static task
static1
Behavioral task
behavioral1
Sample
8924362dcb28df464c0d6f75d8b0cb9ff61de853b265973a7992554c7ca48939.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
8924362dcb28df464c0d6f75d8b0cb9ff61de853b265973a7992554c7ca48939
-
Size
558KB
-
MD5
26a784cbc079122907e700061721c1b0
-
SHA1
4ab34e4bbf1df82480348212b5be1831a04c8588
-
SHA256
8924362dcb28df464c0d6f75d8b0cb9ff61de853b265973a7992554c7ca48939
-
SHA512
accc55527cc8d640b0dd8ebbe01724e41d375c5a84dbf7b2e3811b131dec32b1ad5dc3c834fbc123f8a1e99e88fbcdd3a2ea15008a43e543c94761cb67e4b014
-
SSDEEP
12288:vMr6y90ZxMh1q/wjWXGsF+mMaT0mNR+bqI:pySRnXHT0mNR+bN
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-