General
-
Target
c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30N
-
Size
475KB
-
Sample
241021-hnp7natdrb
-
MD5
500a01c76e42e2772ec258609109c4c0
-
SHA1
13488794a902f65780dbf320cedbd44050425685
-
SHA256
c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30
-
SHA512
6f48c34d604e140ccb1e2aba16771f2d40dc02e6bda7a1adf11c50600a589a27ef94cfe539ba7a2bd4bb4ec12c759ad584261979a7c8e77f4e124dad4b419261
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mZD:9x9GzHlTv/b35tecFB6Y
Behavioral task
behavioral1
Sample
c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30N
-
Size
475KB
-
MD5
500a01c76e42e2772ec258609109c4c0
-
SHA1
13488794a902f65780dbf320cedbd44050425685
-
SHA256
c58f0c7b9a428038d20f5819839bf551144185868cf77ac5a9bb024bd7d61a30
-
SHA512
6f48c34d604e140ccb1e2aba16771f2d40dc02e6bda7a1adf11c50600a589a27ef94cfe539ba7a2bd4bb4ec12c759ad584261979a7c8e77f4e124dad4b419261
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mZD:9x9GzHlTv/b35tecFB6Y
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-