General
-
Target
6c444d97906346930901ba6270b704a0N.exe
-
Size
56KB
-
Sample
240728-h93pwaydng
-
MD5
6c444d97906346930901ba6270b704a0
-
SHA1
c97be1f5bd111a9be5219d844787863d49f13a1b
-
SHA256
168fb7063c7124b99bc523aa831fc3bccc5f64f3b3699911157b258bc883c834
-
SHA512
f65c78942416316e04ac42427b458a753a1bb6dc3c2dfc80d7cb99687ceed889c650194a660b2003c097f692b51b69e0a84d02ec4b1c3a68e6c181116521eff4
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHDh:vMhAe5Zs091KI+JYixw49Xjr+
Static task
static1
Behavioral task
behavioral1
Sample
6c444d97906346930901ba6270b704a0N.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
6c444d97906346930901ba6270b704a0N.exe
-
Size
56KB
-
MD5
6c444d97906346930901ba6270b704a0
-
SHA1
c97be1f5bd111a9be5219d844787863d49f13a1b
-
SHA256
168fb7063c7124b99bc523aa831fc3bccc5f64f3b3699911157b258bc883c834
-
SHA512
f65c78942416316e04ac42427b458a753a1bb6dc3c2dfc80d7cb99687ceed889c650194a660b2003c097f692b51b69e0a84d02ec4b1c3a68e6c181116521eff4
-
SSDEEP
1536:vMcQYte55zs091Zw9FAGDdJYipvwGf9ogjrgHDh:vMhAe5Zs091KI+JYixw49Xjr+
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-