General
-
Target
35ad07c68bce490ba0e798a587ad34d9b1af09cc8de7340215d613d39b3422fd
-
Size
558KB
-
Sample
230207-a4xyfabh4v
-
MD5
7c8c300679eda69455cc300c9c0d7e39
-
SHA1
327807ce6492de3e01c953d90c1a7ee86332ef1b
-
SHA256
35ad07c68bce490ba0e798a587ad34d9b1af09cc8de7340215d613d39b3422fd
-
SHA512
27e6b401fabea45dae730caccaaa9adf52ab7426f0810e795d3eeecaf4f3a604bfb846bc8f07518beb6dbccaa331915d783a154428c1082fdeefe405a46119f1
-
SSDEEP
12288:vMrpy90jiFgn6t9HxCcdsOYRkMaXtAgHisWwtM:2yUDnSvCcdsOrXtAGisWwtM
Static task
static1
Behavioral task
behavioral1
Sample
35ad07c68bce490ba0e798a587ad34d9b1af09cc8de7340215d613d39b3422fd.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
35ad07c68bce490ba0e798a587ad34d9b1af09cc8de7340215d613d39b3422fd
-
Size
558KB
-
MD5
7c8c300679eda69455cc300c9c0d7e39
-
SHA1
327807ce6492de3e01c953d90c1a7ee86332ef1b
-
SHA256
35ad07c68bce490ba0e798a587ad34d9b1af09cc8de7340215d613d39b3422fd
-
SHA512
27e6b401fabea45dae730caccaaa9adf52ab7426f0810e795d3eeecaf4f3a604bfb846bc8f07518beb6dbccaa331915d783a154428c1082fdeefe405a46119f1
-
SSDEEP
12288:vMrpy90jiFgn6t9HxCcdsOYRkMaXtAgHisWwtM:2yUDnSvCcdsOrXtAGisWwtM
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-