General
-
Target
d8d4025643afd9c2615f17f3d57f330c609a3ac8ba89030e11a86c93d634a286
-
Size
558KB
-
Sample
230207-bs2ypaca6v
-
MD5
6170a54df48b69e43dad59b6a000484e
-
SHA1
d71a4f5855a556ccebef88bfac0e5f9c39e839df
-
SHA256
d8d4025643afd9c2615f17f3d57f330c609a3ac8ba89030e11a86c93d634a286
-
SHA512
87eef22e62f710bd5bc9294dafa7153e2528a39f27dfb9a8cb693a1318de0cae51b01963c2816a7ba0e34516cd28865fdf987c0da8eb930c9f563fc4d83850b3
-
SSDEEP
12288:8Mrby90yky0JiivI9y6CZMsOcGH9D9pMlK:vyFkyNSOCZMsOp9xpMA
Static task
static1
Behavioral task
behavioral1
Sample
d8d4025643afd9c2615f17f3d57f330c609a3ac8ba89030e11a86c93d634a286.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
d8d4025643afd9c2615f17f3d57f330c609a3ac8ba89030e11a86c93d634a286
-
Size
558KB
-
MD5
6170a54df48b69e43dad59b6a000484e
-
SHA1
d71a4f5855a556ccebef88bfac0e5f9c39e839df
-
SHA256
d8d4025643afd9c2615f17f3d57f330c609a3ac8ba89030e11a86c93d634a286
-
SHA512
87eef22e62f710bd5bc9294dafa7153e2528a39f27dfb9a8cb693a1318de0cae51b01963c2816a7ba0e34516cd28865fdf987c0da8eb930c9f563fc4d83850b3
-
SSDEEP
12288:8Mrby90yky0JiivI9y6CZMsOcGH9D9pMlK:vyFkyNSOCZMsOp9xpMA
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-