General
-
Target
62c25fcc292b9648dbab3fd2f201d4739acf534d4659d77839d71a085084ae29
-
Size
558KB
-
Sample
230206-z2d5zsbb51
-
MD5
696a6b5bbfd15f35fdbcfbd8e4c779e8
-
SHA1
1c735c4450abe51f8ec26b677ce6dd1812377904
-
SHA256
62c25fcc292b9648dbab3fd2f201d4739acf534d4659d77839d71a085084ae29
-
SHA512
d5a81f69fa4ef2642ad7ffc7c5cf72e77600c18041324e9c6af1a32a5409e59a5f200f66a75cec305fd319bbfd975b71acf77527066fc01541a7acca1d6e8fbc
-
SSDEEP
12288:kMrry90VjB/pzgMwSzVEF2LOsF+qMaTkmNRWJTKu9cgJ/+:3yiZlThKoHHTkmNRWya2
Static task
static1
Behavioral task
behavioral1
Sample
62c25fcc292b9648dbab3fd2f201d4739acf534d4659d77839d71a085084ae29.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
62c25fcc292b9648dbab3fd2f201d4739acf534d4659d77839d71a085084ae29
-
Size
558KB
-
MD5
696a6b5bbfd15f35fdbcfbd8e4c779e8
-
SHA1
1c735c4450abe51f8ec26b677ce6dd1812377904
-
SHA256
62c25fcc292b9648dbab3fd2f201d4739acf534d4659d77839d71a085084ae29
-
SHA512
d5a81f69fa4ef2642ad7ffc7c5cf72e77600c18041324e9c6af1a32a5409e59a5f200f66a75cec305fd319bbfd975b71acf77527066fc01541a7acca1d6e8fbc
-
SSDEEP
12288:kMrry90VjB/pzgMwSzVEF2LOsF+qMaTkmNRWJTKu9cgJ/+:3yiZlThKoHHTkmNRWya2
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-