General
-
Target
950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6
-
Size
69KB
-
Sample
240621-bg7d2athjh
-
MD5
bc946f6d60e45760691b1677a1be5332
-
SHA1
4a157f0f68a46e5a53d58a63c0afaa7b340e1f6c
-
SHA256
950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6
-
SHA512
eb97dbbff65bfd7cc069d00b9f5ab564a0c8998c53f785a2bddb9072e1390d6d9a08b862c21395b279834270353d6477fae5f9740c9c5669ec174f0a35a4fb25
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawv:yLAYUzmdD0sMQl7d7IuhCaem
Static task
static1
Behavioral task
behavioral1
Sample
950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6.exe
Resource
win7-20240508-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6
-
Size
69KB
-
MD5
bc946f6d60e45760691b1677a1be5332
-
SHA1
4a157f0f68a46e5a53d58a63c0afaa7b340e1f6c
-
SHA256
950622c2d41ddc08383c11b97869f76305d7bfd1bcf462b0478365ec756cf4a6
-
SHA512
eb97dbbff65bfd7cc069d00b9f5ab564a0c8998c53f785a2bddb9072e1390d6d9a08b862c21395b279834270353d6477fae5f9740c9c5669ec174f0a35a4fb25
-
SSDEEP
1536:v6fqsAPQYGmPzmZDDZrV8sMQXGkfn33n7z5WeIuhCarawv:yLAYUzmdD0sMQl7d7IuhCaem
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-