General
-
Target
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
-
Size
56KB
-
Sample
240804-ephx7azgjd
-
MD5
37a2bc0718fd1e64051d5b3eb454bc79
-
SHA1
59fd61662918dea5955ad77d8a43d5df5709399e
-
SHA256
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
-
SHA512
c4c6eed7bed29c05760a68901684cc510b2302ea6f389dfbc95dbcd252f1e5af51ac95d4702ae4538797a6d7ed2a780f87bd623bef51fffa06ce7731caae3e29
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8HI:MOemdTd1o74qlmbbJ+x+IkJI
Static task
static1
Behavioral task
behavioral1
Sample
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f.exe
Resource
win7-20240704-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
-
Size
56KB
-
MD5
37a2bc0718fd1e64051d5b3eb454bc79
-
SHA1
59fd61662918dea5955ad77d8a43d5df5709399e
-
SHA256
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
-
SHA512
c4c6eed7bed29c05760a68901684cc510b2302ea6f389dfbc95dbcd252f1e5af51ac95d4702ae4538797a6d7ed2a780f87bd623bef51fffa06ce7731caae3e29
-
SSDEEP
1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8HI:MOemdTd1o74qlmbbJ+x+IkJI
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-