General
-
Target
cc645f3795787ffe14542e823b3ff9f0_exe32.exe
-
Size
322KB
-
Sample
231015-ygzeragh67
-
MD5
cc645f3795787ffe14542e823b3ff9f0
-
SHA1
37218d2ccebf3cb852c5b25e95a9b3f65c4b4099
-
SHA256
05904c17e02ba3dcefffdd3a43099c74db1feab4b8d6995df40701ff8f271f22
-
SHA512
208dc1f787450ef825ec4c37b694dac518b070d7e311590cd6ec7472d23cd94100747e0ed38698c7dfa2976443646fde1e83d897bf99ea1cd49178b5df2b0900
-
SSDEEP
6144:sY4zSop9m06QbGTCnTRoOIH3FPA7AthtLpe:PkXpd6jqiOIHZA3
Static task
static1
Behavioral task
behavioral1
Sample
cc645f3795787ffe14542e823b3ff9f0_exe32.exe
Resource
win7-20230831-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
cc645f3795787ffe14542e823b3ff9f0_exe32.exe
-
Size
322KB
-
MD5
cc645f3795787ffe14542e823b3ff9f0
-
SHA1
37218d2ccebf3cb852c5b25e95a9b3f65c4b4099
-
SHA256
05904c17e02ba3dcefffdd3a43099c74db1feab4b8d6995df40701ff8f271f22
-
SHA512
208dc1f787450ef825ec4c37b694dac518b070d7e311590cd6ec7472d23cd94100747e0ed38698c7dfa2976443646fde1e83d897bf99ea1cd49178b5df2b0900
-
SSDEEP
6144:sY4zSop9m06QbGTCnTRoOIH3FPA7AthtLpe:PkXpd6jqiOIHZA3
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-