General
-
Target
7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70
-
Size
273KB
-
Sample
240405-3blc6afc42
-
MD5
13b40651cf36be5fc7fbf3b2df822414
-
SHA1
169b7b1e6ecf7b8881662e5cde758873e31d687c
-
SHA256
7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70
-
SHA512
52de5bce9e127433ef2568f51337b9963ea11ff66e0d5ff3be2d1d03f2925f870050ad4904bd00f6ba735e70ae1eabc903e3a7b3fa5b2319245712626a559638
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0O:pOzRWu27dlOd5W07
Behavioral task
behavioral1
Sample
7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70.exe
Resource
win7-20231129-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70
-
Size
273KB
-
MD5
13b40651cf36be5fc7fbf3b2df822414
-
SHA1
169b7b1e6ecf7b8881662e5cde758873e31d687c
-
SHA256
7dd7b6a667031cd0111f52030ec40cd7c4211db41151e00216e13468eca53d70
-
SHA512
52de5bce9e127433ef2568f51337b9963ea11ff66e0d5ff3be2d1d03f2925f870050ad4904bd00f6ba735e70ae1eabc903e3a7b3fa5b2319245712626a559638
-
SSDEEP
3072:pp56zRJ83+OJ7NoGvdwWy6k04yW/KME0jj0O:pOzRWu27dlOd5W07
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-