General
-
Target
db67c417fd7bc947044c0a29888c493d0ec4a4dd4dd4a7b64b29f587c3c95791
-
Size
186KB
-
Sample
240405-b1y7rshd29
-
MD5
4491cbe6f8811578ad2c6481785d8f25
-
SHA1
2486de2ec51e2f3d39eb656ecd7e2f989efb4998
-
SHA256
db67c417fd7bc947044c0a29888c493d0ec4a4dd4dd4a7b64b29f587c3c95791
-
SHA512
d27062f3bd3b344b405b28ba5e27eca37f6bf4f60a39b0671d75b0abe7823bd15b892e8301e7b7af89e20aa8fa97a21eecfd78b9d3d563c58a6a270a5c953c2f
-
SSDEEP
3072:CgFeKWwO8PWlafsuKLIor6G4hvomP65TPp00uhtTI:CkeKWCWlafsFLR8BPwPp05TI
Behavioral task
behavioral1
Sample
db67c417fd7bc947044c0a29888c493d0ec4a4dd4dd4a7b64b29f587c3c95791.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
db67c417fd7bc947044c0a29888c493d0ec4a4dd4dd4a7b64b29f587c3c95791
-
Size
186KB
-
MD5
4491cbe6f8811578ad2c6481785d8f25
-
SHA1
2486de2ec51e2f3d39eb656ecd7e2f989efb4998
-
SHA256
db67c417fd7bc947044c0a29888c493d0ec4a4dd4dd4a7b64b29f587c3c95791
-
SHA512
d27062f3bd3b344b405b28ba5e27eca37f6bf4f60a39b0671d75b0abe7823bd15b892e8301e7b7af89e20aa8fa97a21eecfd78b9d3d563c58a6a270a5c953c2f
-
SSDEEP
3072:CgFeKWwO8PWlafsuKLIor6G4hvomP65TPp00uhtTI:CkeKWCWlafsFLR8BPwPp05TI
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-