General
-
Target
de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1
-
Size
66KB
-
Sample
240623-e1gt9stcnl
-
MD5
3249d05491763fe671eb6158a8e7c1ce
-
SHA1
1256dd6f0ee7f5c35a9f025c2ef57e95260f578a
-
SHA256
de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1
-
SHA512
008e244778a4e6b61d455cdb2e65c65029a6afb05673a9640f9bb24ffb510e72814f87914402630b2ba8149595a7b1ec14951f1dfcd93054e60fff59a5fd4e04
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPZ:l//AjMp+u2onejH2PZ
Static task
static1
Behavioral task
behavioral1
Sample
de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1.exe
Resource
win7-20240508-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1
-
Size
66KB
-
MD5
3249d05491763fe671eb6158a8e7c1ce
-
SHA1
1256dd6f0ee7f5c35a9f025c2ef57e95260f578a
-
SHA256
de42e7e0382a534dfbf940e3217401485672d27554c46b08239d71c8df0aa5c1
-
SHA512
008e244778a4e6b61d455cdb2e65c65029a6afb05673a9640f9bb24ffb510e72814f87914402630b2ba8149595a7b1ec14951f1dfcd93054e60fff59a5fd4e04
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPZ:l//AjMp+u2onejH2PZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-