General
-
Target
42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f
-
Size
407KB
-
Sample
240310-zknyvsbh71
-
MD5
d1cf6fd58f7d223c719ef934a5d5978a
-
SHA1
ce0a431d8defc0c8b2fed009fc21582b9bca8878
-
SHA256
42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f
-
SHA512
5a2ed12b477998914fdbb1d236d1417fea43a92ac41fc48786a4d3af5115439ebf0e1dae248522d88b605ef82a35e60de9602b1c652abbdd01ac689b44aecf22
-
SSDEEP
6144:GkBy7+8pCOVi3L+w6Vg0lnwzBDFqzRoRXOmbvRQ20HV:GUwRpCOVi3aPg0lwzN0RY+mbvr4
Behavioral task
behavioral1
Sample
42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.31.165
Targets
-
-
Target
42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f
-
Size
407KB
-
MD5
d1cf6fd58f7d223c719ef934a5d5978a
-
SHA1
ce0a431d8defc0c8b2fed009fc21582b9bca8878
-
SHA256
42d144d5401b0a13204484661bdbb944c21e40469ab7e2a9d57af6f6b4ec609f
-
SHA512
5a2ed12b477998914fdbb1d236d1417fea43a92ac41fc48786a4d3af5115439ebf0e1dae248522d88b605ef82a35e60de9602b1c652abbdd01ac689b44aecf22
-
SSDEEP
6144:GkBy7+8pCOVi3L+w6Vg0lnwzBDFqzRoRXOmbvRQ20HV:GUwRpCOVi3aPg0lwzN0RY+mbvr4
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-