General
-
Target
b8f788750bcdec10cdca7daa18c166f0N.exe
-
Size
324KB
-
Sample
240727-mvs94syaqd
-
MD5
b8f788750bcdec10cdca7daa18c166f0
-
SHA1
5ae561b0a5a5cdfa1aadb20f2355e718670c471c
-
SHA256
2b26868cdea1e236721c55cf842cce7d4a0aec370543c6a819dda8ccb8570d43
-
SHA512
7df0a5b99a15d111ef047eb455243d715cb3d987e1bf043ca7f4124cf2d4db558a2be7b5eecc27ee367b3b41d6942261bde9b80419de04d5b97d60a7a79f7d67
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYuA:vHW138/iXWlK885rKlGSekcj66ciU
Static task
static1
Behavioral task
behavioral1
Sample
b8f788750bcdec10cdca7daa18c166f0N.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
b8f788750bcdec10cdca7daa18c166f0N.exe
-
Size
324KB
-
MD5
b8f788750bcdec10cdca7daa18c166f0
-
SHA1
5ae561b0a5a5cdfa1aadb20f2355e718670c471c
-
SHA256
2b26868cdea1e236721c55cf842cce7d4a0aec370543c6a819dda8ccb8570d43
-
SHA512
7df0a5b99a15d111ef047eb455243d715cb3d987e1bf043ca7f4124cf2d4db558a2be7b5eecc27ee367b3b41d6942261bde9b80419de04d5b97d60a7a79f7d67
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYuA:vHW138/iXWlK885rKlGSekcj66ciU
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-