General
-
Target
g6470620.exe
-
Size
223KB
-
Sample
230802-ehtq4scf57
-
MD5
aea234064483f651010cf9d981f59fea
-
SHA1
002ad73a666d2d92d0c6d6b617e61c6fa0c5f3a6
-
SHA256
58b02c8b4bc2bf7f5f1e8e45d7c206956f188ae56b648922ca75987b999db503
-
SHA512
eae415ef55aeb1b4548c2422a72e618fce17c2c1322918d33dc6b9202a01c743a5684ba28e5d83b6cdb2b703bc12569e6bb0e87ef2decb4e8a18592e1380a434
-
SSDEEP
3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+
Behavioral task
behavioral1
Sample
g6470620.exe
Resource
win7-20230712-en
Malware Config
Extracted
amadey
3.86
77.91.68.61/rock/index.php
Targets
-
-
Target
g6470620.exe
-
Size
223KB
-
MD5
aea234064483f651010cf9d981f59fea
-
SHA1
002ad73a666d2d92d0c6d6b617e61c6fa0c5f3a6
-
SHA256
58b02c8b4bc2bf7f5f1e8e45d7c206956f188ae56b648922ca75987b999db503
-
SHA512
eae415ef55aeb1b4548c2422a72e618fce17c2c1322918d33dc6b9202a01c743a5684ba28e5d83b6cdb2b703bc12569e6bb0e87ef2decb4e8a18592e1380a434
-
SSDEEP
3072:3vtV3ROZ6RDwrR3wMUzUVwQ3rInyRnIvPak3hhiHFSbuZhuNcZVKBzqm8LHIkbGB:ftV3euVz6rKyS3yHFHhuNcPKpwU+
-
Executes dropped EXE
-
Loads dropped DLL
-