General
-
Target
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
Size
782KB
-
Sample
231219-mtwnvafagn
-
MD5
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
SHA1
0dece3a9762f60c8b326bd5800cb9d54555b58d5
-
SHA256
d8be9d9de7092b85a892a31146662759a7f2714e246c2cf1700ae48c9c4c4870
-
SHA512
12904b98247451e63aadf9195b547d5605c55a17d1ffb01250bec171844ecc629da26568cc7580a814be04c13b30a0682cd63333e15b342748eba222f74d588b
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1V:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8Q
Behavioral task
behavioral1
Sample
0bf5f3c1f48917dfd51c9e6e662dbdcf.exe
Resource
win7-20231215-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
Size
782KB
-
MD5
0bf5f3c1f48917dfd51c9e6e662dbdcf
-
SHA1
0dece3a9762f60c8b326bd5800cb9d54555b58d5
-
SHA256
d8be9d9de7092b85a892a31146662759a7f2714e246c2cf1700ae48c9c4c4870
-
SHA512
12904b98247451e63aadf9195b547d5605c55a17d1ffb01250bec171844ecc629da26568cc7580a814be04c13b30a0682cd63333e15b342748eba222f74d588b
-
SSDEEP
12288:YOlx4kk9HKda4YfM/1T3PPSnPI2VAWNDTJHq9DIMTW8c1V:YA4Ya1fQzPPSnPFqWtTJK9DIMTW8Q
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-