General
- Target 7c3a4e5e2e70335a50398b338d845e0801b6977bc835bd80a6e7eddd5380a18d
- Size 125KB
- Sample240316-1a1eksed98
- SHA256 7c3a4e5e2e70335a50398b338d845e0801b6977bc835bd80a6e7eddd5380a18d
- MD5 6722222e3dc78a102eafdf8d2f9fb340
- SHA1 e14fe7b40686cb36c0b54e65a477b81a56410420
- SHA512 45501b8f23e300f5ada301f7968c1bd234f4f056503beed4978d3ff17beee42e930bf50de9b5518e3f4e72fed1d586ad59c28532a3994d905924926613f84f67
- SSDEEP 1536:Ko6JdvxttIBcXISDPV2Mhg3GkFceersWjcd06UsfqW2vxq6UU/HpX:iHC6D92O8n7eU06UsfUpqCx
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
7c3a4e5e2e70335a50398b338d845e0801b6977bc835bd80a6e7eddd5380a18d.exe
Resource
win7-20240221-en
6 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.209
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 7c3a4e5e2e70335a50398b338d845e0801b6977bc835bd80a6e7eddd5380a18d
- Size 125KB
- SHA256 7c3a4e5e2e70335a50398b338d845e0801b6977bc835bd80a6e7eddd5380a18d
- MD5 6722222e3dc78a102eafdf8d2f9fb340
- SHA1 e14fe7b40686cb36c0b54e65a477b81a56410420
- SHA512 45501b8f23e300f5ada301f7968c1bd234f4f056503beed4978d3ff17beee42e930bf50de9b5518e3f4e72fed1d586ad59c28532a3994d905924926613f84f67
- SSDEEP 1536:Ko6JdvxttIBcXISDPV2Mhg3GkFceersWjcd06UsfqW2vxq6UU/HpX:iHC6D92O8n7eU06UsfUpqCx
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL