General
-
Target
0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846.exe
-
Size
432KB
-
Sample
240726-qwxwgavbla
-
MD5
be542e225b5a041f7d228b4b6c4936e8
-
SHA1
8bf87c7d0767461084254004be228d4297bbeafb
-
SHA256
0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846
-
SHA512
f9b612dc7fd67aeaedea9c500c2e05a5269642a8139c4aed5cc49db31f8cb3ee09ce99df2ff43a260747a1d031d45899a10be77db9bcd7f6c9ed5e5a903e82fa
-
SSDEEP
6144:L8efQ6QPJGcLbjg0CutsGH+revgLIAP1fXo1EZH:C6QPJGcE0SGereYdPc
Behavioral task
behavioral1
Sample
0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846.exe
Resource
win7-20240705-en
Malware Config
Extracted
urelas
1.234.83.146
133.242.129.155
218.54.31.226
218.54.30.235
218.54.31.165
Targets
-
-
Target
0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846.exe
-
Size
432KB
-
MD5
be542e225b5a041f7d228b4b6c4936e8
-
SHA1
8bf87c7d0767461084254004be228d4297bbeafb
-
SHA256
0c1386734a551f78ffc94ae1eef61ab942072615d39c6ed381e89dcec121b846
-
SHA512
f9b612dc7fd67aeaedea9c500c2e05a5269642a8139c4aed5cc49db31f8cb3ee09ce99df2ff43a260747a1d031d45899a10be77db9bcd7f6c9ed5e5a903e82fa
-
SSDEEP
6144:L8efQ6QPJGcLbjg0CutsGH+revgLIAP1fXo1EZH:C6QPJGcE0SGereYdPc
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-