General
-
Target
0x00080000000122dc-121.dat
-
Size
205KB
-
Sample
230611-azxrwagb55
-
MD5
1f7bb558c775ad5a97243e8c22918ca4
-
SHA1
c34140fa4efd58718488ae548cb82491e0f7e128
-
SHA256
de523132af9ac7e193660a0d5d1e220efd75974a7945910e7ce298204f428541
-
SHA512
8e7767d2da7b8aa1de8fb6d22e49b41985d5128749c4d9efbc29e3c4c84dd05dab9da0d550b7d4b0ba1cbafcca341e73e6b7e82d5f4ace1cb91ee84774a57072
-
SSDEEP
3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
Behavioral task
behavioral1
Sample
0x00080000000122dc-121.exe
Resource
win7-20230220-en
Malware Config
Extracted
amadey
3.83
77.91.68.30/music/rock/index.php
Targets
-
-
Target
0x00080000000122dc-121.dat
-
Size
205KB
-
MD5
1f7bb558c775ad5a97243e8c22918ca4
-
SHA1
c34140fa4efd58718488ae548cb82491e0f7e128
-
SHA256
de523132af9ac7e193660a0d5d1e220efd75974a7945910e7ce298204f428541
-
SHA512
8e7767d2da7b8aa1de8fb6d22e49b41985d5128749c4d9efbc29e3c4c84dd05dab9da0d550b7d4b0ba1cbafcca341e73e6b7e82d5f4ace1cb91ee84774a57072
-
SSDEEP
3072:H/DmgskHbfHN+Pst60p0zuNmnKG7peNMQbuZAIqbey3lfbi:fDmfAfHN+wiuInRexuZAIij
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-