General
-
Target
bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e
-
Size
330KB
-
Sample
241023-d7sdxa1cmm
-
MD5
0a876c26a87f190545fb112547a4ddc1
-
SHA1
a8948fd4fe8c374a1f9a1df2a290965a708daf90
-
SHA256
bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e
-
SHA512
993182e1cdcbb3bb2c9d9b896b1b849cdaba936685e1c8fcf1f8c4f500133ba9fd04f437e14ce6a9ee6b893ba74c3af8eb1742142f690127dc81a91b89886326
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9:vHW138/iXWlK885rKlGSekcj66cik
Static task
static1
Behavioral task
behavioral1
Sample
bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e
-
Size
330KB
-
MD5
0a876c26a87f190545fb112547a4ddc1
-
SHA1
a8948fd4fe8c374a1f9a1df2a290965a708daf90
-
SHA256
bf09a7e0411d896cb604da91ec59bd4b0fe76c5fa7a2808bdd245df2ab6deb0e
-
SHA512
993182e1cdcbb3bb2c9d9b896b1b849cdaba936685e1c8fcf1f8c4f500133ba9fd04f437e14ce6a9ee6b893ba74c3af8eb1742142f690127dc81a91b89886326
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY9:vHW138/iXWlK885rKlGSekcj66cik
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-