General
-
Target
1b251f7c96f0dd027474fec67deb808a_JC.exe
-
Size
175KB
-
Sample
231003-vkblbadh7t
-
MD5
1b251f7c96f0dd027474fec67deb808a
-
SHA1
a7cb75f199e6b5f406305eaae9781127dd25c29e
-
SHA256
ad2b6b7ad359e82798328079cb289d37c57a208bab79c26ed860668429cd21a1
-
SHA512
a75bf2bd5d5d451b9dff7583a1d77ee36495065f4c72eaa3fa45f8c1b5f6704bbf1a1e6f05c6592eb8abc2b10a23beee43d43d98913f7e5cb6704a4ab507f68f
-
SSDEEP
1536:fIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKspXmrj4mdUtb9Sc:fIc8RWrNcvXLM7u265wppXCQL
Behavioral task
behavioral1
Sample
1b251f7c96f0dd027474fec67deb808a_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
1b251f7c96f0dd027474fec67deb808a_JC.exe
-
Size
175KB
-
MD5
1b251f7c96f0dd027474fec67deb808a
-
SHA1
a7cb75f199e6b5f406305eaae9781127dd25c29e
-
SHA256
ad2b6b7ad359e82798328079cb289d37c57a208bab79c26ed860668429cd21a1
-
SHA512
a75bf2bd5d5d451b9dff7583a1d77ee36495065f4c72eaa3fa45f8c1b5f6704bbf1a1e6f05c6592eb8abc2b10a23beee43d43d98913f7e5cb6704a4ab507f68f
-
SSDEEP
1536:fIN9E8RW2ZgACLU2/NpWb3owdFLVa7h5s3ePOHd265dCKspXmrj4mdUtb9Sc:fIc8RWrNcvXLM7u265wppXCQL
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-