General
-
Target
5f169b56830ff1be1feacf781cd916d09ad7b1ca095e1ea619e88b7984d32629
-
Size
6.5MB
-
Sample
240610-px53sswejl
-
MD5
d025ce44f2d111405a6647bdc69dae58
-
SHA1
d2bd73a3bb19800f4a500f08e01ee2b1afff319b
-
SHA256
5f169b56830ff1be1feacf781cd916d09ad7b1ca095e1ea619e88b7984d32629
-
SHA512
3c3a8f9d7c317ea37353f3ad9f4f5e37602c4516ec905c34b27657e0bdcea19f67c4fc56f3b73a750cc9fc8f1e140a47fe4dc509ccb438db6edd6f5997cf1591
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSZ:i0LrA2kHKQHNk3og9unipQyOaOZ
Static task
static1
Behavioral task
behavioral1
Sample
5f169b56830ff1be1feacf781cd916d09ad7b1ca095e1ea619e88b7984d32629.exe
Resource
win7-20240220-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
5f169b56830ff1be1feacf781cd916d09ad7b1ca095e1ea619e88b7984d32629
-
Size
6.5MB
-
MD5
d025ce44f2d111405a6647bdc69dae58
-
SHA1
d2bd73a3bb19800f4a500f08e01ee2b1afff319b
-
SHA256
5f169b56830ff1be1feacf781cd916d09ad7b1ca095e1ea619e88b7984d32629
-
SHA512
3c3a8f9d7c317ea37353f3ad9f4f5e37602c4516ec905c34b27657e0bdcea19f67c4fc56f3b73a750cc9fc8f1e140a47fe4dc509ccb438db6edd6f5997cf1591
-
SSDEEP
98304:Roc5swrA2XGxlHKcjTjNk3o659yrnfKtDrKIAyyks+Ctf8mQZVSZ:i0LrA2kHKQHNk3og9unipQyOaOZ
-
UPX dump on OEP (original entry point)
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-