General
-
Target
24e1be5bea5132f67f3db944308f2b5b3106755882ff13d7e7da3b92c389dc70N
-
Size
333KB
-
Sample
241010-zepyzavhnh
-
MD5
ec4663a4f14e092fe9b6622176e78790
-
SHA1
27df4292b7082100da0d30c074862fae2d5cd4a2
-
SHA256
24e1be5bea5132f67f3db944308f2b5b3106755882ff13d7e7da3b92c389dc70
-
SHA512
5c255674a3aabe93ee6b95a53660eb0035ffce9dc44bd0eca0fb21016a1689d0ae831a559c6352774183ba333b75516e77a4dbb531ddfd54e26c8542fbb9b9da
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYK:vHW138/iXWlK885rKlGSekcj66ci/
Static task
static1
Behavioral task
behavioral1
Sample
24e1be5bea5132f67f3db944308f2b5b3106755882ff13d7e7da3b92c389dc70N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
24e1be5bea5132f67f3db944308f2b5b3106755882ff13d7e7da3b92c389dc70N
-
Size
333KB
-
MD5
ec4663a4f14e092fe9b6622176e78790
-
SHA1
27df4292b7082100da0d30c074862fae2d5cd4a2
-
SHA256
24e1be5bea5132f67f3db944308f2b5b3106755882ff13d7e7da3b92c389dc70
-
SHA512
5c255674a3aabe93ee6b95a53660eb0035ffce9dc44bd0eca0fb21016a1689d0ae831a559c6352774183ba333b75516e77a4dbb531ddfd54e26c8542fbb9b9da
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYK:vHW138/iXWlK885rKlGSekcj66ci/
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-