General
- Target b7ba70b11e59f101cba1cd141c109b1f6f3728d78df1838e518a5810c969c116
- Size 365KB
- Sample240327-3l17csdd95
- SHA256 b7ba70b11e59f101cba1cd141c109b1f6f3728d78df1838e518a5810c969c116
- MD5 40fc178bdd90bc1b2d4bdc19cbf3ad1a
- SHA1 19dc8230ea23db3b82a2e81888e14833e4982172
- SHA512 bf25b5f518b46120a3e3cce26d5e34872a561416684822c6d903c69e22db734c3f02725f38443f27b0c72f2d5299599fed5deb63d641928e96415b0b2192dee3
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pe:OzGL2C2aZ2/F1WHHUaveOHjTy
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
b7ba70b11e59f101cba1cd141c109b1f6f3728d78df1838e518a5810c969c116.exe
Resource
win7-20240221-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
1.234.83.146
-
133.242.129.155
-
218.54.31.165
-
218.54.31.226
Targets
-
- Target b7ba70b11e59f101cba1cd141c109b1f6f3728d78df1838e518a5810c969c116
- Size 365KB
- SHA256 b7ba70b11e59f101cba1cd141c109b1f6f3728d78df1838e518a5810c969c116
- MD5 40fc178bdd90bc1b2d4bdc19cbf3ad1a
- SHA1 19dc8230ea23db3b82a2e81888e14833e4982172
- SHA512 bf25b5f518b46120a3e3cce26d5e34872a561416684822c6d903c69e22db734c3f02725f38443f27b0c72f2d5299599fed5deb63d641928e96415b0b2192dee3
- SSDEEP 6144:OuJkl8DV12C28tLN2/FkCOfHVm0fMaHftvCGCBhDOHjTPmXHk62pe:OzGL2C2aZ2/F1WHHUaveOHjTy
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL