General
-
Target
6e93d33a04317ee3d8057533e2e5fa28da31351f80d1ebf52221124337364551
-
Size
483KB
-
Sample
240316-zv99vadh92
-
MD5
2e89cb75d424e128b437b2c27eeee532
-
SHA1
99643b2f414f40070752d00c264d0c2bdadb55a2
-
SHA256
6e93d33a04317ee3d8057533e2e5fa28da31351f80d1ebf52221124337364551
-
SHA512
f7462e57439015ca793f8c5296ddf2db7e7e10b9e94abe3c7a793416f353a4ce0f0bcaae89e4f0bf35450bb97eb620e4ce1f1856f38f3a14d785fa22c06b5c6d
-
SSDEEP
12288:k2PxDgZo3ijniea8Xih9abyNK95ZA9u3y2XWbh:k2SLi7oih9abvce+
Behavioral task
behavioral1
Sample
6e93d33a04317ee3d8057533e2e5fa28da31351f80d1ebf52221124337364551.exe
Resource
win7-20240215-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
218.54.31.165
Targets
-
-
Target
6e93d33a04317ee3d8057533e2e5fa28da31351f80d1ebf52221124337364551
-
Size
483KB
-
MD5
2e89cb75d424e128b437b2c27eeee532
-
SHA1
99643b2f414f40070752d00c264d0c2bdadb55a2
-
SHA256
6e93d33a04317ee3d8057533e2e5fa28da31351f80d1ebf52221124337364551
-
SHA512
f7462e57439015ca793f8c5296ddf2db7e7e10b9e94abe3c7a793416f353a4ce0f0bcaae89e4f0bf35450bb97eb620e4ce1f1856f38f3a14d785fa22c06b5c6d
-
SSDEEP
12288:k2PxDgZo3ijniea8Xih9abyNK95ZA9u3y2XWbh:k2SLi7oih9abvce+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-