General
-
Target
a1986464de7c51ae0d4f741c15e74f16_JC.exe
-
Size
222KB
-
Sample
231001-prnasscb95
-
MD5
a1986464de7c51ae0d4f741c15e74f16
-
SHA1
35fbb43cb2110df64531579c473564f3f62872b7
-
SHA256
f9cc226bdcfc374ab6c5c79a8fac93384a6e8b69b67b7acf2bd4ccb9fb28e3af
-
SHA512
0f85812216ae625a89f90ae22848d10a6deb487b4867431fe12ba6043879fca85c6a0b713b9441bb558a5b819f4f51f97fa2c1883abccbedc47348cf90fe4860
-
SSDEEP
3072:WBKBy7+8pCOH1ch9ZLqrwrr58V2po8d3E:WkBy7+8pCOVi3L+w6MpRd3E
Behavioral task
behavioral1
Sample
a1986464de7c51ae0d4f741c15e74f16_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
a1986464de7c51ae0d4f741c15e74f16_JC.exe
-
Size
222KB
-
MD5
a1986464de7c51ae0d4f741c15e74f16
-
SHA1
35fbb43cb2110df64531579c473564f3f62872b7
-
SHA256
f9cc226bdcfc374ab6c5c79a8fac93384a6e8b69b67b7acf2bd4ccb9fb28e3af
-
SHA512
0f85812216ae625a89f90ae22848d10a6deb487b4867431fe12ba6043879fca85c6a0b713b9441bb558a5b819f4f51f97fa2c1883abccbedc47348cf90fe4860
-
SSDEEP
3072:WBKBy7+8pCOH1ch9ZLqrwrr58V2po8d3E:WkBy7+8pCOVi3L+w6MpRd3E
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-