General
-
Target
22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4
-
Size
330KB
-
Sample
241023-xy7a9axgpn
-
MD5
45d8b112d6bd44f7a878ba1cf39da188
-
SHA1
3c0e6d3e5a486f372924217ce088ef2f5a93fdb4
-
SHA256
22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4
-
SHA512
efcf882bed1abd8ab5b6ce15d7a270c199f78d24c724ae3c70080eee83efe2d66cf2b7484c4d2395da819db11a0ad1d750fbecdbe1d85ab5bb7da431fc033ed6
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66ciZ
Static task
static1
Behavioral task
behavioral1
Sample
22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4
-
Size
330KB
-
MD5
45d8b112d6bd44f7a878ba1cf39da188
-
SHA1
3c0e6d3e5a486f372924217ce088ef2f5a93fdb4
-
SHA256
22e877a400c037cfdf6ccfa103794d4bc626e6e81a5b07fc64600b4a2e6c95c4
-
SHA512
efcf882bed1abd8ab5b6ce15d7a270c199f78d24c724ae3c70080eee83efe2d66cf2b7484c4d2395da819db11a0ad1d750fbecdbe1d85ab5bb7da431fc033ed6
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYI:vHW138/iXWlK885rKlGSekcj66ciZ
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-