General
-
Target
2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312N
-
Size
334KB
-
Sample
241010-f2pryaybph
-
MD5
6f471b8db93a1994595c281472a55e90
-
SHA1
60f86b330ef4961e3465cd70cc6e7edfeaa04217
-
SHA256
2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312
-
SHA512
737a5f50f26e542b0c8926364576e048679cff821e8489b7f47ed8dad40a96390b6e7bb049591bda5be8033bd53493469379e968c1d990ed5e960f52a078bbd1
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciZ
Static task
static1
Behavioral task
behavioral1
Sample
2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312N
-
Size
334KB
-
MD5
6f471b8db93a1994595c281472a55e90
-
SHA1
60f86b330ef4961e3465cd70cc6e7edfeaa04217
-
SHA256
2bcbecf0ad05a630dbeef549101c76114450120e646d34053b373d4cd7b16312
-
SHA512
737a5f50f26e542b0c8926364576e048679cff821e8489b7f47ed8dad40a96390b6e7bb049591bda5be8033bd53493469379e968c1d990ed5e960f52a078bbd1
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYs:vHW138/iXWlK885rKlGSekcj66ciZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-