General
-
Target
16389a346faf235c2a0be839ddec4d8f359ae1664b1e2da1ad5373a7c3c696c8
-
Size
92KB
-
Sample
240808-xknlzsxfkl
-
MD5
30160a086e2b0d41c569c13822f9cdad
-
SHA1
16be95ae00af1c997ddf953e208f33834ba82938
-
SHA256
16389a346faf235c2a0be839ddec4d8f359ae1664b1e2da1ad5373a7c3c696c8
-
SHA512
0704df61cc21edb6d429dfef1ba8bda265af00293831a7032ed14f0c6607ba64e3dcecc98eb3bf165ae70edf6e986412aeeeda89eef94f71f4231f0f112c8913
-
SSDEEP
768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEd:heZqP25TuIfmS7Fv1aUZSD9yiIH7
Static task
static1
Behavioral task
behavioral1
Sample
16389a346faf235c2a0be839ddec4d8f359ae1664b1e2da1ad5373a7c3c696c8.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
16389a346faf235c2a0be839ddec4d8f359ae1664b1e2da1ad5373a7c3c696c8
-
Size
92KB
-
MD5
30160a086e2b0d41c569c13822f9cdad
-
SHA1
16be95ae00af1c997ddf953e208f33834ba82938
-
SHA256
16389a346faf235c2a0be839ddec4d8f359ae1664b1e2da1ad5373a7c3c696c8
-
SHA512
0704df61cc21edb6d429dfef1ba8bda265af00293831a7032ed14f0c6607ba64e3dcecc98eb3bf165ae70edf6e986412aeeeda89eef94f71f4231f0f112c8913
-
SSDEEP
768:2geZ5QeklJQ35pPRuIkUD1sYAQ/TN71N1adOZSHj9jaSCpOzIi7D8kUUUNUEd:heZqP25TuIfmS7Fv1aUZSD9yiIH7
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Executes dropped EXE
-
Loads dropped DLL
-