General
- Target aa4dc9f3feda66b7688ab7899a4bc195a5d6dd0ae8fcea9936acf517dc650dac
- Size 178KB
- Sample240310-ame2aseh74
- SHA256 aa4dc9f3feda66b7688ab7899a4bc195a5d6dd0ae8fcea9936acf517dc650dac
- MD5 6b5c66bd484faba116735a21c06071b9
- SHA1 a8cd57baa041f738a20d4781763582cf836d7e0a
- SHA512 4a19d6e59ebce0e22beaece66be730c35af8e9e18639c85da8fe611e91ef1dc4a3f4f1c16328c7e4fb40377aa4adc81dc9eb75a246a7b9b07f080363b95e1bfe
- SSDEEP 1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pWDW:SuYndSW7gILCLIPtqVu5DqpxhzWDW
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
aa4dc9f3feda66b7688ab7899a4bc195a5d6dd0ae8fcea9936acf517dc650dac.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
121.88.5.183
-
121.88.5.184
-
218.54.28.139
Targets
-
- Target aa4dc9f3feda66b7688ab7899a4bc195a5d6dd0ae8fcea9936acf517dc650dac
- Size 178KB
- SHA256 aa4dc9f3feda66b7688ab7899a4bc195a5d6dd0ae8fcea9936acf517dc650dac
- MD5 6b5c66bd484faba116735a21c06071b9
- SHA1 a8cd57baa041f738a20d4781763582cf836d7e0a
- SHA512 4a19d6e59ebce0e22beaece66be730c35af8e9e18639c85da8fe611e91ef1dc4a3f4f1c16328c7e4fb40377aa4adc81dc9eb75a246a7b9b07f080363b95e1bfe
- SSDEEP 1536:JP02aqzNYndSTa+B3Rt2fZt+RtTILSZpLIQaV3WvGtWX0gu5DqpwWLtxhl7pWDW:SuYndSW7gILCLIPtqVu5DqpxhzWDW
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL