General
- Target def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
- Size 56KB
- Sample240804-ephx7azgjd
- SHA256 def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
- MD5 37a2bc0718fd1e64051d5b3eb454bc79
- SHA1 59fd61662918dea5955ad77d8a43d5df5709399e
- SHA512 c4c6eed7bed29c05760a68901684cc510b2302ea6f389dfbc95dbcd252f1e5af51ac95d4702ae4538797a6d7ed2a780f87bd623bef51fffa06ce7731caae3e29
- SSDEEP 1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8HI:MOemdTd1o74qlmbbJ+x+IkJI
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f.exe
Resource
win7-20240704-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
- Size 56KB
- SHA256 def331ad10d30978f1d88a196dcdd5cefa3ce0e2edf0fa8b36255f294859782f
- MD5 37a2bc0718fd1e64051d5b3eb454bc79
- SHA1 59fd61662918dea5955ad77d8a43d5df5709399e
- SHA512 c4c6eed7bed29c05760a68901684cc510b2302ea6f389dfbc95dbcd252f1e5af51ac95d4702ae4538797a6d7ed2a780f87bd623bef51fffa06ce7731caae3e29
- SSDEEP 1536:MQPzemdaNqAPG17k74qlmbbVgYyvxcd5jnGWqN7kS8HI:MOemdTd1o74qlmbbJ+x+IkJI
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL