General
-
Target
0d40c6ed3bb93766766f8e0e325acb20N.exe
-
Size
56KB
-
Sample
240712-229yrsxajf
-
MD5
0d40c6ed3bb93766766f8e0e325acb20
-
SHA1
e00a274d0ebe106424abeef8d72c29b2f86695e9
-
SHA256
0b1a8603ae89200d97744cfa54e666befe95a937c87d077fd98264bd45f9bd71
-
SHA512
487ebab1d6a439e4b13815bbeb949c860716566ec7989605c6fc532570305bbb9dfca434664a831a212aa8f25589e2153fcb21d400ddd934f1f17c1e36f5b696
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHi:vMhAe5Zs091KI+JYixw49Xjrp
Static task
static1
Behavioral task
behavioral1
Sample
0d40c6ed3bb93766766f8e0e325acb20N.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
0d40c6ed3bb93766766f8e0e325acb20N.exe
-
Size
56KB
-
MD5
0d40c6ed3bb93766766f8e0e325acb20
-
SHA1
e00a274d0ebe106424abeef8d72c29b2f86695e9
-
SHA256
0b1a8603ae89200d97744cfa54e666befe95a937c87d077fd98264bd45f9bd71
-
SHA512
487ebab1d6a439e4b13815bbeb949c860716566ec7989605c6fc532570305bbb9dfca434664a831a212aa8f25589e2153fcb21d400ddd934f1f17c1e36f5b696
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHi:vMhAe5Zs091KI+JYixw49Xjrp
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-