General
-
Target
4410a5e10e9552894991e694074c6d00_JC.exe
-
Size
333KB
-
Sample
231012-n6hs7aba58
-
MD5
4410a5e10e9552894991e694074c6d00
-
SHA1
4331706357276fc33965494e1100792a0eeb796b
-
SHA256
a16a68812c916b28777daf96a82fcff7f33d5c5c94027be27ed4c12b0ccc83c7
-
SHA512
25ce99eb05c77ce3e669de6048ce3e7d7aef2a32f6f03e42a1188eb9980e0a68432ce8b77a34dbf3576795ac73127d7513f96d5666b72165c723d126980b9299
-
SSDEEP
6144:asgDYs7ivUxR3JyVVVhmb9ObGT4F53eRFM/O17x0M7unOuO5Lvxk3:asgESlJyrTI9O8aYR717x0M7/G
Static task
static1
Behavioral task
behavioral1
Sample
4410a5e10e9552894991e694074c6d00_JC.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
4410a5e10e9552894991e694074c6d00_JC.exe
-
Size
333KB
-
MD5
4410a5e10e9552894991e694074c6d00
-
SHA1
4331706357276fc33965494e1100792a0eeb796b
-
SHA256
a16a68812c916b28777daf96a82fcff7f33d5c5c94027be27ed4c12b0ccc83c7
-
SHA512
25ce99eb05c77ce3e669de6048ce3e7d7aef2a32f6f03e42a1188eb9980e0a68432ce8b77a34dbf3576795ac73127d7513f96d5666b72165c723d126980b9299
-
SSDEEP
6144:asgDYs7ivUxR3JyVVVhmb9ObGT4F53eRFM/O17x0M7unOuO5Lvxk3:asgESlJyrTI9O8aYR717x0M7/G
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-