General
-
Target
e9792f2db1dac8b2d81f7f1c7ea634f17c930c23e9cee24f87337a5436bd5eef
-
Size
558KB
-
Sample
230206-z4f3csfh66
-
MD5
1bd6fa7e6413740961e7cab551adf42b
-
SHA1
f6b98a895dd30401313cc7107d37413c363630cd
-
SHA256
e9792f2db1dac8b2d81f7f1c7ea634f17c930c23e9cee24f87337a5436bd5eef
-
SHA512
7c3fa7c0cc031c50506ba9f76a801992c56d1fcb1ff6336acce9364588c732571195fa99a3be85afb0a8d9e880bce424eab202c1879a01db219567dd5661f8bb
-
SSDEEP
12288:UMruy90tHC9qySRBKcPsF+EMaTxmNR9HDWaiE:Kygi9ObwHTxmNR96pE
Static task
static1
Behavioral task
behavioral1
Sample
e9792f2db1dac8b2d81f7f1c7ea634f17c930c23e9cee24f87337a5436bd5eef.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
e9792f2db1dac8b2d81f7f1c7ea634f17c930c23e9cee24f87337a5436bd5eef
-
Size
558KB
-
MD5
1bd6fa7e6413740961e7cab551adf42b
-
SHA1
f6b98a895dd30401313cc7107d37413c363630cd
-
SHA256
e9792f2db1dac8b2d81f7f1c7ea634f17c930c23e9cee24f87337a5436bd5eef
-
SHA512
7c3fa7c0cc031c50506ba9f76a801992c56d1fcb1ff6336acce9364588c732571195fa99a3be85afb0a8d9e880bce424eab202c1879a01db219567dd5661f8bb
-
SSDEEP
12288:UMruy90tHC9qySRBKcPsF+EMaTxmNR9HDWaiE:Kygi9ObwHTxmNR96pE
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-