General
- Target bfd7a02cc1d28ca7231b333c14ff280f
- Size 536KB
- Sample240311-e2y5yacc6t
- SHA256 4dbc1a06048161314d5e154fffeaa5a9ea12615931fb72848860cfffbcd46931
- MD5 bfd7a02cc1d28ca7231b333c14ff280f
- SHA1 f825f75ce4574588f307803b37f24d7d8831bef3
- SHA512 3c2bce0388cf5672d6283a234338db92c944949109d250668ebf52290592553ca3bc196f1553d8c2cb594d8b513576774cdba0380ba4057711aff290f89f3b58
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPP:q0P/k4lb2wKatP
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
bfd7a02cc1d28ca7231b333c14ff280f.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
Targets
-
- Target bfd7a02cc1d28ca7231b333c14ff280f
- Size 536KB
- SHA256 4dbc1a06048161314d5e154fffeaa5a9ea12615931fb72848860cfffbcd46931
- MD5 bfd7a02cc1d28ca7231b333c14ff280f
- SHA1 f825f75ce4574588f307803b37f24d7d8831bef3
- SHA512 3c2bce0388cf5672d6283a234338db92c944949109d250668ebf52290592553ca3bc196f1553d8c2cb594d8b513576774cdba0380ba4057711aff290f89f3b58
- SSDEEP 12288:q0nPhglq2Uyt4R/b2G/0hznQGoexBU/NPP:q0P/k4lb2wKatP
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL