General
-
Target
92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7
-
Size
324KB
-
Sample
240728-b17txa1anr
-
MD5
af4a0a3252e92465547ee37416213f72
-
SHA1
4818e4540da9d7f10156192a6f0139ed8b1bdf0c
-
SHA256
92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7
-
SHA512
5ca773ae23ebdbeafd2e5e926e919d0d52451d77b93fb48a690f565603e0fc3ca7a44276296e1140b90dada664bc2a1004d511447d27464d37a558bb069e863e
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYv:vHW138/iXWlK885rKlGSekcj66cim
Static task
static1
Behavioral task
behavioral1
Sample
92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7
-
Size
324KB
-
MD5
af4a0a3252e92465547ee37416213f72
-
SHA1
4818e4540da9d7f10156192a6f0139ed8b1bdf0c
-
SHA256
92b71635c2fabda636e52edc96e060725afa3059e3f405db405c8f83c9359ed7
-
SHA512
5ca773ae23ebdbeafd2e5e926e919d0d52451d77b93fb48a690f565603e0fc3ca7a44276296e1140b90dada664bc2a1004d511447d27464d37a558bb069e863e
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYv:vHW138/iXWlK885rKlGSekcj66cim
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-