General
-
Target
0x000800000001235f-92.dat
-
Size
205KB
-
Sample
230614-rev6zsaa61
-
MD5
2425b77a718e305dc30869618074ac44
-
SHA1
49af371aad990f5d138dce055450061994d9a367
-
SHA256
2a40373ae4688abc43698d24dc63b9f2a079cbb71a9bca4f90e23dd9be573364
-
SHA512
127c8747539ed9213cc4a1bb256f91371c349918be6abf9b02000c502901a0334a22edde6c6114e0e847d45a3ab6590d51d735ebe60086fd9d5f19ad6d3cabbb
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj
Behavioral task
behavioral1
Sample
0x000800000001235f-92.exe
Resource
win7-20230220-en
Malware Config
Extracted
amadey
3.84
77.91.68.63/doma/net/index.php
Targets
-
-
Target
0x000800000001235f-92.dat
-
Size
205KB
-
MD5
2425b77a718e305dc30869618074ac44
-
SHA1
49af371aad990f5d138dce055450061994d9a367
-
SHA256
2a40373ae4688abc43698d24dc63b9f2a079cbb71a9bca4f90e23dd9be573364
-
SHA512
127c8747539ed9213cc4a1bb256f91371c349918be6abf9b02000c502901a0334a22edde6c6114e0e847d45a3ab6590d51d735ebe60086fd9d5f19ad6d3cabbb
-
SSDEEP
3072:CXkSckkHbzG1iXAt60p0zuNmnKG7peNMQbuZAIOb2y3xfbT:8kSDAzG1iciuInRexuZAIKj
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-