General
-
Target
b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130
-
Size
56KB
-
Sample
240723-cgb4ka1eqc
-
MD5
6bc6d3ef3a45c337462b692271b09cce
-
SHA1
17d474c1246cce14805e53ed25d9105aaa4bae20
-
SHA256
b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130
-
SHA512
a52fa030193233ea0a1c30d0432dd826ac8987df27abe0c3e9db9309d095723052c6d74711f09e776abb8d6a6002e4f60765aac1377eb3b622698f5b92be1cad
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8lR:MOemdTd1o74qlmbbJ+x+IkfR
Static task
static1
Behavioral task
behavioral1
Sample
b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130
-
Size
56KB
-
MD5
6bc6d3ef3a45c337462b692271b09cce
-
SHA1
17d474c1246cce14805e53ed25d9105aaa4bae20
-
SHA256
b9c484ae2e82dbbfe49f670f4bd578c5e054e112d49979439d184161ee701130
-
SHA512
a52fa030193233ea0a1c30d0432dd826ac8987df27abe0c3e9db9309d095723052c6d74711f09e776abb8d6a6002e4f60765aac1377eb3b622698f5b92be1cad
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8lR:MOemdTd1o74qlmbbJ+x+IkfR
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-