General
-
Target
48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a
-
Size
330KB
-
Sample
241024-zagf2atbnh
-
MD5
9ee173d4110145b3764c7d169e194410
-
SHA1
0ec6ed51e5c6cfdd09fdb41d2701fa045d505627
-
SHA256
48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a
-
SHA512
601b14814a16a77c77163a4317a3028b7fe25b96afb9fcffc55d8998c8522d54c76d7fa4104a17faaaa4c49c7eae00c295c554a31f1feb78bef972e1247a174e
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5w:vHW138/iXWlK885rKlGSekcj66ci3
Static task
static1
Behavioral task
behavioral1
Sample
48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a
-
Size
330KB
-
MD5
9ee173d4110145b3764c7d169e194410
-
SHA1
0ec6ed51e5c6cfdd09fdb41d2701fa045d505627
-
SHA256
48330b29adce16bf7a24e74a1949d3fae22c4e403e3ab0224deaa35d4db3ac4a
-
SHA512
601b14814a16a77c77163a4317a3028b7fe25b96afb9fcffc55d8998c8522d54c76d7fa4104a17faaaa4c49c7eae00c295c554a31f1feb78bef972e1247a174e
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XY5w:vHW138/iXWlK885rKlGSekcj66ci3
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-