General
-
Target
220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38N
-
Size
333KB
-
Sample
241010-xgv7nawfrn
-
MD5
c23847d035bab660215d50477c0b7b10
-
SHA1
935a125cbc515bfef83fb303ee0d52c696348117
-
SHA256
220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38
-
SHA512
b9828c60e6615b9840768709acbdde6c2007800b467eb093f4b296931eb2279c80c281326be21411d471b641f27537039712cf1e53be18865df10177141d0720
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYJ:vHW138/iXWlK885rKlGSekcj66ciM
Static task
static1
Behavioral task
behavioral1
Sample
220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38N
-
Size
333KB
-
MD5
c23847d035bab660215d50477c0b7b10
-
SHA1
935a125cbc515bfef83fb303ee0d52c696348117
-
SHA256
220bfaba60f72f0ae171a3e1f2964d8c9fdb6f8403f327bf8d1dc1ae68617c38
-
SHA512
b9828c60e6615b9840768709acbdde6c2007800b467eb093f4b296931eb2279c80c281326be21411d471b641f27537039712cf1e53be18865df10177141d0720
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYJ:vHW138/iXWlK885rKlGSekcj66ciM
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-