General
-
Target
4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff
-
Size
64KB
-
Sample
240804-1cm72awhkr
-
MD5
ac414a4a49be6f98206b0c9dc1712079
-
SHA1
c4ba3165d0eba121f6cbc682a03f117238e73ca0
-
SHA256
4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff
-
SHA512
c24b79bf61b7768526182d391af5ab57b552629ffead0bc172d541effd874d3e8c266492dcdfc28604be44a0ecfd03c553a91a15c6887f53c3479a7302fb62f9
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0:6bQRSHpAvzyf7MzeThD0
Static task
static1
Behavioral task
behavioral1
Sample
4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff
-
Size
64KB
-
MD5
ac414a4a49be6f98206b0c9dc1712079
-
SHA1
c4ba3165d0eba121f6cbc682a03f117238e73ca0
-
SHA256
4f1e9b920ab44db0d247d547511217a23dd7111114ef91a828b49ac69f42fcff
-
SHA512
c24b79bf61b7768526182d391af5ab57b552629ffead0bc172d541effd874d3e8c266492dcdfc28604be44a0ecfd03c553a91a15c6887f53c3479a7302fb62f9
-
SSDEEP
1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUD0:6bQRSHpAvzyf7MzeThD0
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-