General
-
Target
78e5230711bdb92050938f7cfba4f04c8787a2277e0ac616272253ac0d88a8fb
-
Size
558KB
-
Sample
230207-cwat2sha89
-
MD5
cf4ba38758777eea09d05198876a9c6c
-
SHA1
58ce6f4a2189de1cac4a8d814ad625c050680d99
-
SHA256
78e5230711bdb92050938f7cfba4f04c8787a2277e0ac616272253ac0d88a8fb
-
SHA512
dfdcadbdfbc858bc2844ad22aeef5e84331e5b74688015c7529019488f2b5eea6a669f881aeb1f7d76c8d13ea296ecab14d2d6b64b70a54088d456c95367f735
-
SSDEEP
12288:JMrVy90Vwe56f+rDhG2ZBCh0sO0c7BSItHf:cy9KhnBCh0sOzB9R
Static task
static1
Behavioral task
behavioral1
Sample
78e5230711bdb92050938f7cfba4f04c8787a2277e0ac616272253ac0d88a8fb.exe
Resource
win10v2004-20221111-en
Malware Config
Extracted
amadey
3.66
62.204.41.4/Gol478Ns/index.php
Targets
-
-
Target
78e5230711bdb92050938f7cfba4f04c8787a2277e0ac616272253ac0d88a8fb
-
Size
558KB
-
MD5
cf4ba38758777eea09d05198876a9c6c
-
SHA1
58ce6f4a2189de1cac4a8d814ad625c050680d99
-
SHA256
78e5230711bdb92050938f7cfba4f04c8787a2277e0ac616272253ac0d88a8fb
-
SHA512
dfdcadbdfbc858bc2844ad22aeef5e84331e5b74688015c7529019488f2b5eea6a669f881aeb1f7d76c8d13ea296ecab14d2d6b64b70a54088d456c95367f735
-
SSDEEP
12288:JMrVy90Vwe56f+rDhG2ZBCh0sO0c7BSItHf:cy9KhnBCh0sOzB9R
Score10/10-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-
Adds Run key to start application
-