General
-
Target
27235f65e99eed017f5a7333d532ccbd45d1021063796160beda9b7e1efb7a2b
-
Size
430KB
-
Sample
240419-yg33yaee41
-
MD5
0598d2e7250e9ae9b206f1eb3c5a4ba7
-
SHA1
6bb12aa9a9abf993646946ff7d30656f73b39559
-
SHA256
27235f65e99eed017f5a7333d532ccbd45d1021063796160beda9b7e1efb7a2b
-
SHA512
014b0934d05d4e39a679e67aad044bc700b10ea258eabc14a7a19093a5af4275629e11cbd343bf220fe9c84324b186eb97cbffda8ecaecfad2e27bcd18e9b590
-
SSDEEP
6144:BKbwhNxUjDVMytD2NkWuRk/oBmodd+sAaTmQo2fkKgU:4ANxU3VH1t19MsAlpXJU
Behavioral task
behavioral1
Sample
27235f65e99eed017f5a7333d532ccbd45d1021063796160beda9b7e1efb7a2b.exe
Resource
win7-20240221-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
27235f65e99eed017f5a7333d532ccbd45d1021063796160beda9b7e1efb7a2b
-
Size
430KB
-
MD5
0598d2e7250e9ae9b206f1eb3c5a4ba7
-
SHA1
6bb12aa9a9abf993646946ff7d30656f73b39559
-
SHA256
27235f65e99eed017f5a7333d532ccbd45d1021063796160beda9b7e1efb7a2b
-
SHA512
014b0934d05d4e39a679e67aad044bc700b10ea258eabc14a7a19093a5af4275629e11cbd343bf220fe9c84324b186eb97cbffda8ecaecfad2e27bcd18e9b590
-
SSDEEP
6144:BKbwhNxUjDVMytD2NkWuRk/oBmodd+sAaTmQo2fkKgU:4ANxU3VH1t19MsAlpXJU
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-