General
-
Target
31195303f890d055355b36098a7c4d59b2ef97b0318bafd15b779eb8c6ccccbc
-
Size
389KB
-
Sample
240304-xk25daac6t
-
MD5
0f3e61b83b339df43f528a3f82fadda8
-
SHA1
e73c52768449f2d7f850acf2c2453489f7952434
-
SHA256
31195303f890d055355b36098a7c4d59b2ef97b0318bafd15b779eb8c6ccccbc
-
SHA512
c29aed3faad0583efb73f34dd31bdbb21b96fcae6224d13333776c2f65549efba9b1b8c5d2a9e1250e3b7109ab9892420ec09bfece4ad250a2cca711f78ea2b1
-
SSDEEP
6144:eQiWreSUbn8y5+l/bRzBiw5G4DrA3vpt6t3tj5xC6qpbb+1WZ:eMr6bwzRF75G44vpt6XjCKs
Behavioral task
behavioral1
Sample
31195303f890d055355b36098a7c4d59b2ef97b0318bafd15b779eb8c6ccccbc.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
31195303f890d055355b36098a7c4d59b2ef97b0318bafd15b779eb8c6ccccbc
-
Size
389KB
-
MD5
0f3e61b83b339df43f528a3f82fadda8
-
SHA1
e73c52768449f2d7f850acf2c2453489f7952434
-
SHA256
31195303f890d055355b36098a7c4d59b2ef97b0318bafd15b779eb8c6ccccbc
-
SHA512
c29aed3faad0583efb73f34dd31bdbb21b96fcae6224d13333776c2f65549efba9b1b8c5d2a9e1250e3b7109ab9892420ec09bfece4ad250a2cca711f78ea2b1
-
SSDEEP
6144:eQiWreSUbn8y5+l/bRzBiw5G4DrA3vpt6t3tj5xC6qpbb+1WZ:eMr6bwzRF75G44vpt6XjCKs
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-