General
-
Target
39ef887fe57baed19cfd7567bd6735239aefe443d57192067309aa89ff8c0a08
-
Size
558KB
-
Sample
230206-zsdg4abb3v
-
MD5
c8f59e88c9e662b6ffe3b2f3c7a22b74
-
SHA1
df033fad5f6b331f5fe401ec3f95f214b08b13bf
-
SHA256
39ef887fe57baed19cfd7567bd6735239aefe443d57192067309aa89ff8c0a08
-
SHA512
c26e70d3bdddb0fde625c280251d03c01560b1362d8c60bf19a3fc063aecbe8c33f357937e0db332e8a24ff2ca1e5c6cd3cacd7eafe8943934715d130cb70c69
-
SSDEEP
12288:4Mrxy90QC+w1vfLR4WJakzsF+WMaTkmNRKTGq5e52D4:JyHJwpjNajHTkmNRKqQMa4
Static task
static1
Behavioral task
behavioral1
Sample
39ef887fe57baed19cfd7567bd6735239aefe443d57192067309aa89ff8c0a08.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
39ef887fe57baed19cfd7567bd6735239aefe443d57192067309aa89ff8c0a08
-
Size
558KB
-
MD5
c8f59e88c9e662b6ffe3b2f3c7a22b74
-
SHA1
df033fad5f6b331f5fe401ec3f95f214b08b13bf
-
SHA256
39ef887fe57baed19cfd7567bd6735239aefe443d57192067309aa89ff8c0a08
-
SHA512
c26e70d3bdddb0fde625c280251d03c01560b1362d8c60bf19a3fc063aecbe8c33f357937e0db332e8a24ff2ca1e5c6cd3cacd7eafe8943934715d130cb70c69
-
SSDEEP
12288:4Mrxy90QC+w1vfLR4WJakzsF+WMaTkmNRKTGq5e52D4:JyHJwpjNajHTkmNRKqQMa4
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-