General
-
Target
6b6b044d57f3b23867bea7a4912a76d698ae19ae0d62419027176651c98059b1
-
Size
6.4MB
-
Sample
240601-2ka34shc2w
-
MD5
1688579eab257ef8369be22ddd49357d
-
SHA1
64451df23fa1a22fb86052ffcd0914b2c6ceea26
-
SHA256
6b6b044d57f3b23867bea7a4912a76d698ae19ae0d62419027176651c98059b1
-
SHA512
1b9433e683807666862666d6dfdf8e103b61fe4816177b7ca5dc16c9e734bce304657d3ef7c0a5a711ca3f984e77661cf076d937d610b2dc13054535f7e6d9e9
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSi:i0LrA2kHKQHNk3og9unipQyOaOi
Static task
static1
Behavioral task
behavioral1
Sample
6b6b044d57f3b23867bea7a4912a76d698ae19ae0d62419027176651c98059b1.exe
Resource
win7-20240220-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
6b6b044d57f3b23867bea7a4912a76d698ae19ae0d62419027176651c98059b1
-
Size
6.4MB
-
MD5
1688579eab257ef8369be22ddd49357d
-
SHA1
64451df23fa1a22fb86052ffcd0914b2c6ceea26
-
SHA256
6b6b044d57f3b23867bea7a4912a76d698ae19ae0d62419027176651c98059b1
-
SHA512
1b9433e683807666862666d6dfdf8e103b61fe4816177b7ca5dc16c9e734bce304657d3ef7c0a5a711ca3f984e77661cf076d937d610b2dc13054535f7e6d9e9
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSi:i0LrA2kHKQHNk3og9unipQyOaOi
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-