General
-
Target
ca6f9c631995d60ec3148e58eed83189
-
Size
136KB
-
Sample
240315-emf1tahh68
-
MD5
ca6f9c631995d60ec3148e58eed83189
-
SHA1
77074e3eb52829a531d3894fe5564eb3a8c0acf6
-
SHA256
540be617e7722af56931ac9f8e905f932d6241540eae989f299a7c082ede5e13
-
SHA512
1ab769ef310900e5e55cd61a6d9aed4dff97f6d793cc8294d16d89b28bc56029f555a3acc613770fc0358cda6af3578afcddfa6b26ddeaae7a74b6af0913b544
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APs:P/5kqCxiXEcO3XfGf2tMUf6odgR5AU
Behavioral task
behavioral1
Sample
ca6f9c631995d60ec3148e58eed83189.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
ca6f9c631995d60ec3148e58eed83189
-
Size
136KB
-
MD5
ca6f9c631995d60ec3148e58eed83189
-
SHA1
77074e3eb52829a531d3894fe5564eb3a8c0acf6
-
SHA256
540be617e7722af56931ac9f8e905f932d6241540eae989f299a7c082ede5e13
-
SHA512
1ab769ef310900e5e55cd61a6d9aed4dff97f6d793cc8294d16d89b28bc56029f555a3acc613770fc0358cda6af3578afcddfa6b26ddeaae7a74b6af0913b544
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APs:P/5kqCxiXEcO3XfGf2tMUf6odgR5AU
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-