General
-
Target
0ef8efdca638efb29520351632672cc0N.exe
-
Size
61KB
-
Sample
240723-1eskjazdnk
-
MD5
0ef8efdca638efb29520351632672cc0
-
SHA1
70b61011e0bc5f8d795403c905762bc075d50fef
-
SHA256
f8ff4e4a99acd9aa1aca963b8c60c56a73d8c5a4be64d88ddb69f0d3b8b835f1
-
SHA512
4111944241c67bf28018b78a41bdf47125126635660f527df8c2333e8a3654c3acfb9c64bd2851b926368ca6ee6b31bf6be469dc6c610264676b9eb82d75ec45
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVg:Jo0cAthu6+FQ0JuPkg
Static task
static1
Behavioral task
behavioral1
Sample
0ef8efdca638efb29520351632672cc0N.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
0ef8efdca638efb29520351632672cc0N.exe
-
Size
61KB
-
MD5
0ef8efdca638efb29520351632672cc0
-
SHA1
70b61011e0bc5f8d795403c905762bc075d50fef
-
SHA256
f8ff4e4a99acd9aa1aca963b8c60c56a73d8c5a4be64d88ddb69f0d3b8b835f1
-
SHA512
4111944241c67bf28018b78a41bdf47125126635660f527df8c2333e8a3654c3acfb9c64bd2851b926368ca6ee6b31bf6be469dc6c610264676b9eb82d75ec45
-
SSDEEP
1536:saTkcl2v/z0thjkh6+uYLo31d0JuPrROVg:Jo0cAthu6+FQ0JuPkg
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-