General
- Target 8e7639f21b8be401d4d040fa100b3d665418f0d0eb7aca9d6c283f8688765e36
- Size 367KB
- Sample240316-121vesfc75
- SHA256 8e7639f21b8be401d4d040fa100b3d665418f0d0eb7aca9d6c283f8688765e36
- MD5 55e2b28e5b61d0269ad3e4c5c0e05180
- SHA1 9bdeca964f12f062832e82d3d2bf9847a274040a
- SHA512 3218ab53f7391bfc625d074babc05c56c2948f78920793bb25febdfb55c2334edb422e7db52907cdd45891a49130ab6a6ae94d9ea742a3c317d47b41409d9410
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pL:OzGL2C2aZ2/F1WHHUaveOHjT3
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
8e7639f21b8be401d4d040fa100b3d665418f0d0eb7aca9d6c283f8688765e36.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target 8e7639f21b8be401d4d040fa100b3d665418f0d0eb7aca9d6c283f8688765e36
- Size 367KB
- SHA256 8e7639f21b8be401d4d040fa100b3d665418f0d0eb7aca9d6c283f8688765e36
- MD5 55e2b28e5b61d0269ad3e4c5c0e05180
- SHA1 9bdeca964f12f062832e82d3d2bf9847a274040a
- SHA512 3218ab53f7391bfc625d074babc05c56c2948f78920793bb25febdfb55c2334edb422e7db52907cdd45891a49130ab6a6ae94d9ea742a3c317d47b41409d9410
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pL:OzGL2C2aZ2/F1WHHUaveOHjT3
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL