General
-
Target
00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b
-
Size
331KB
-
Sample
241024-wn6raszenk
-
MD5
d1dcec10e5a8a95bfcdbce9d385b083e
-
SHA1
cc234341afaf794975cbc276beafb97481d4a1a0
-
SHA256
00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b
-
SHA512
38187716a365b278db7a03a64c786be595ddd2dacb4eeac0162a0ea2c86b47191513fd5db4e96fdbc8251156822cd1c299155cfe11122993ccdd5924207e2475
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVi:vHW138/iXWlK885rKlGSekcj66ciEi
Static task
static1
Behavioral task
behavioral1
Sample
00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b
-
Size
331KB
-
MD5
d1dcec10e5a8a95bfcdbce9d385b083e
-
SHA1
cc234341afaf794975cbc276beafb97481d4a1a0
-
SHA256
00054133b85d05a3c0a2954310331b68472a43155e03783a5bb2a0affb00659b
-
SHA512
38187716a365b278db7a03a64c786be595ddd2dacb4eeac0162a0ea2c86b47191513fd5db4e96fdbc8251156822cd1c299155cfe11122993ccdd5924207e2475
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYVi:vHW138/iXWlK885rKlGSekcj66ciEi
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-