General
-
Target
f1a02bb65507f7389e2be945de988df3dc57f5131d5786edcfe1c250f2feb448
-
Size
458KB
-
Sample
240320-cfat4sea48
-
MD5
5afb1129920d77ddd95676b8abf77d5c
-
SHA1
70896079c9d48c547693bec5a4fd3a43891d8e91
-
SHA256
f1a02bb65507f7389e2be945de988df3dc57f5131d5786edcfe1c250f2feb448
-
SHA512
fbb00f018a10e5d9b0d0e1cccac35e2818d07b51485ca5003ae9e014fac52c3581411c7c5a37fa2456b6e4553e0b3ba314f67b0ab7b6dfad4ff4ea77c4bd8927
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHZ:CMpASIcWYx2U6hAJQnj5
Behavioral task
behavioral1
Sample
f1a02bb65507f7389e2be945de988df3dc57f5131d5786edcfe1c250f2feb448.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
f1a02bb65507f7389e2be945de988df3dc57f5131d5786edcfe1c250f2feb448
-
Size
458KB
-
MD5
5afb1129920d77ddd95676b8abf77d5c
-
SHA1
70896079c9d48c547693bec5a4fd3a43891d8e91
-
SHA256
f1a02bb65507f7389e2be945de988df3dc57f5131d5786edcfe1c250f2feb448
-
SHA512
fbb00f018a10e5d9b0d0e1cccac35e2818d07b51485ca5003ae9e014fac52c3581411c7c5a37fa2456b6e4553e0b3ba314f67b0ab7b6dfad4ff4ea77c4bd8927
-
SSDEEP
6144:CEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpdFTWHZ:CMpASIcWYx2U6hAJQnj5
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-