General
-
Target
4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dcN
-
Size
507KB
-
Sample
241023-vv6t7s1frb
-
MD5
afabaa8dda0ceafe8d9720b24b70d2e0
-
SHA1
2f6bb162073bccc539ba8d65715d0fcb1f269600
-
SHA256
4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dc
-
SHA512
5f6adcac905f842235be8435a6d359c763d8c1d5274825dc86d3d213bb39af1a89f72772f0051f16b31da9c1a07c11d4d18f741254652e7aa063f76689c7102c
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoM:3MUv2LAv9AQ1p4dKt
Behavioral task
behavioral1
Sample
4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dcN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dcN
-
Size
507KB
-
MD5
afabaa8dda0ceafe8d9720b24b70d2e0
-
SHA1
2f6bb162073bccc539ba8d65715d0fcb1f269600
-
SHA256
4645de429b6f373cb478d77b475b04ef0f5c005262e772bed974f470b65979dc
-
SHA512
5f6adcac905f842235be8435a6d359c763d8c1d5274825dc86d3d213bb39af1a89f72772f0051f16b31da9c1a07c11d4d18f741254652e7aa063f76689c7102c
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoM:3MUv2LAv9AQ1p4dKt
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-