General
-
Target
ac59e3715f8dae42406952e8ec759320N.exe
-
Size
59KB
-
Sample
240805-tjz2va1ejk
-
MD5
ac59e3715f8dae42406952e8ec759320
-
SHA1
72be58e71f351834893c188f4e88349b50467d89
-
SHA256
9b9fcae8338d9b592efd5542a5f2f94035efc4607e1a862e31950d12acb062f4
-
SHA512
a984432cfe114c588a35f03e3f87ac099a781bd9998cc6c57418c96ffc9af6c12106ac67955d0d8c0c47bb7330ca8747ddad3038c1671a82ece6162d874317d3
-
SSDEEP
1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel9u:GVpYPx3S2K3ks3ff3p409u
Static task
static1
Behavioral task
behavioral1
Sample
ac59e3715f8dae42406952e8ec759320N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
ac59e3715f8dae42406952e8ec759320N.exe
-
Size
59KB
-
MD5
ac59e3715f8dae42406952e8ec759320
-
SHA1
72be58e71f351834893c188f4e88349b50467d89
-
SHA256
9b9fcae8338d9b592efd5542a5f2f94035efc4607e1a862e31950d12acb062f4
-
SHA512
a984432cfe114c588a35f03e3f87ac099a781bd9998cc6c57418c96ffc9af6c12106ac67955d0d8c0c47bb7330ca8747ddad3038c1671a82ece6162d874317d3
-
SSDEEP
1536:xAVpYPLsUDbXUzzqNANl9isgM5myeteYOH3p4Pel9u:GVpYPx3S2K3ks3ff3p409u
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-