General
-
Target
c58c2c1d9b550d299413073bcbed861f
-
Size
552KB
-
Sample
240313-lnvzpaca43
-
MD5
c58c2c1d9b550d299413073bcbed861f
-
SHA1
96c38fd5b043e720e8970698db8fd56da5c0223e
-
SHA256
5385bfab87b9e85929506830eb034f47f248d60c2d2c206a16cad6578dcaeb1d
-
SHA512
5fa9d4752a883697f99103639529b4f893996c8391ba9b626ed5fce9e7b7e5af349ab78798918e349f345e5000213a5e0195aa970cd17954981f04fb53ced021
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzll:+rt4/NArwjs5oll
Behavioral task
behavioral1
Sample
c58c2c1d9b550d299413073bcbed861f.exe
Resource
win7-20240220-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
c58c2c1d9b550d299413073bcbed861f
-
Size
552KB
-
MD5
c58c2c1d9b550d299413073bcbed861f
-
SHA1
96c38fd5b043e720e8970698db8fd56da5c0223e
-
SHA256
5385bfab87b9e85929506830eb034f47f248d60c2d2c206a16cad6578dcaeb1d
-
SHA512
5fa9d4752a883697f99103639529b4f893996c8391ba9b626ed5fce9e7b7e5af349ab78798918e349f345e5000213a5e0195aa970cd17954981f04fb53ced021
-
SSDEEP
12288:++GtVfjTQSaoINAHT1VQ1i3SyQEW85gzll:+rt4/NArwjs5oll
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-