General
- Target 2aac6d86bd697e53e9a31eb139523650N.exe
- Size 79KB
- Sample240719-ajvycatelm
- SHA256 e8c2cde4d1c2dc2c6ce653f50008e4e47844a142c2576b199419b79cb0fbb692
- MD5 2aac6d86bd697e53e9a31eb139523650
- SHA1 5e1047570e77d41dacaef83010d6a0df28c07eba
- SHA512 7e0a0229b7f1ac544a3f7b78884de7fa0c3845bb1324748e7d6b3044feb9ac5ebab56c467468c0520256ae5a779f85602bc51eddf087a40096a41cc0b74f8190
- SSDEEP 1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDEg:9RkjWjK9ABpGzlaRQLd
- MD5 SHA1 SHA512 SSDEEP
Behavioral task
behavioral1
Sample
2aac6d86bd697e53e9a31eb139523650N.exe
Resource
win7-20240708-en
7 signatures
120 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 2aac6d86bd697e53e9a31eb139523650N.exe
- Size 79KB
- SHA256 e8c2cde4d1c2dc2c6ce653f50008e4e47844a142c2576b199419b79cb0fbb692
- MD5 2aac6d86bd697e53e9a31eb139523650
- SHA1 5e1047570e77d41dacaef83010d6a0df28c07eba
- SHA512 7e0a0229b7f1ac544a3f7b78884de7fa0c3845bb1324748e7d6b3044feb9ac5ebab56c467468c0520256ae5a779f85602bc51eddf087a40096a41cc0b74f8190
- SSDEEP 1536:9HxkDvWdB7O9dKymMyCMGni2Lz1LaRQLDEg:9RkjWjK9ABpGzlaRQLd
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL