General
-
Target
6323aef8348b30adff08ea09103e2a752792da5fd4fa3fdd7b12dd038a534d96
-
Size
558KB
-
Sample
230207-c653yacc4z
-
MD5
632ea1dbd091a3939d67ce93de32e24c
-
SHA1
95794ed9356f0d80b68b839381ed2d5cec09e24e
-
SHA256
6323aef8348b30adff08ea09103e2a752792da5fd4fa3fdd7b12dd038a534d96
-
SHA512
3ad90c111445bfd86a13e92c16811032fd68ff86cd6983428beeaf7944f4e9e8776147f26240952a2d4319fa646f5e6342c92b6dfe90b5093ce4e3aa3d510f9e
-
SSDEEP
12288:8Mray90pnM3VSQ4W2jDEpr22T/lcS9LCl0NrCOIu:2ymnaVx4W2jD4DT59LCErCy
Static task
static1
Behavioral task
behavioral1
Sample
6323aef8348b30adff08ea09103e2a752792da5fd4fa3fdd7b12dd038a534d96.exe
Resource
win10v2004-20220901-en
Malware Config
Extracted
amadey
3.66
62.204.41.5/Bu58Ngs/index.php
Targets
-
-
Target
6323aef8348b30adff08ea09103e2a752792da5fd4fa3fdd7b12dd038a534d96
-
Size
558KB
-
MD5
632ea1dbd091a3939d67ce93de32e24c
-
SHA1
95794ed9356f0d80b68b839381ed2d5cec09e24e
-
SHA256
6323aef8348b30adff08ea09103e2a752792da5fd4fa3fdd7b12dd038a534d96
-
SHA512
3ad90c111445bfd86a13e92c16811032fd68ff86cd6983428beeaf7944f4e9e8776147f26240952a2d4319fa646f5e6342c92b6dfe90b5093ce4e3aa3d510f9e
-
SSDEEP
12288:8Mray90pnM3VSQ4W2jDEpr22T/lcS9LCl0NrCOIu:2ymnaVx4W2jD4DT59LCErCy
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-