General
-
Target
b2f9c43e06ceb549a7b529ff46835c9f771b3a7a6c891ff1d7a27db6aa4b79f0
-
Size
558KB
-
Sample
230207-a2xvnagf85
-
MD5
98ba846cb3df526214dab4cc6b669a78
-
SHA1
25ff7661cf3e148148d679feb010fa288c7b0da1
-
SHA256
b2f9c43e06ceb549a7b529ff46835c9f771b3a7a6c891ff1d7a27db6aa4b79f0
-
SHA512
cba1a2aa80e6134040da93301e79667999c9c24ed7698778e898d73ae32fecd3f2190d0a3413bbbd2321775265e9560807632bfda71599e2e808d5a3652a1843
-
SSDEEP
6144:Khy+bnr+5p0yN90QEfW4WqfkWPAezIMf3Ldr5z6bYikf4v4Cp2hsOSRlyGB08/d6:nMrly90F9cWwM/N5z15Cp0sOwrXiai
Static task
static1
Behavioral task
behavioral1
Sample
b2f9c43e06ceb549a7b529ff46835c9f771b3a7a6c891ff1d7a27db6aa4b79f0.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
b2f9c43e06ceb549a7b529ff46835c9f771b3a7a6c891ff1d7a27db6aa4b79f0
-
Size
558KB
-
MD5
98ba846cb3df526214dab4cc6b669a78
-
SHA1
25ff7661cf3e148148d679feb010fa288c7b0da1
-
SHA256
b2f9c43e06ceb549a7b529ff46835c9f771b3a7a6c891ff1d7a27db6aa4b79f0
-
SHA512
cba1a2aa80e6134040da93301e79667999c9c24ed7698778e898d73ae32fecd3f2190d0a3413bbbd2321775265e9560807632bfda71599e2e808d5a3652a1843
-
SSDEEP
6144:Khy+bnr+5p0yN90QEfW4WqfkWPAezIMf3Ldr5z6bYikf4v4Cp2hsOSRlyGB08/d6:nMrly90F9cWwM/N5z15Cp0sOwrXiai
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-