General
- Target b021eca8188fc387a61f16144201d240N.exe
- Size 322KB
- Sample240821-e234wszdng
- SHA256 33fde40e05fa570bb5d53dce070933ca1001e57687fa0327dfe587c97861dd55
- MD5 b021eca8188fc387a61f16144201d240
- SHA1 1ba5194fcd8babc2bfadc57dc7bc7bfb7be3dc41
- SHA512 5bd71c2db4ddcbd907454d2a88527a6267367b723da8882dc0a17ee9e97adf7479cca40eb9a110c24492ca4a4cf15478b65a05127c0062d399685908e68a95d0
- SSDEEP 6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYd:vHW138/iXWlK885rKlGSekcj66cik
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
b021eca8188fc387a61f16144201d240N.exe
Resource
win7-20240708-en
8 signatures
120 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.31.226
-
218.54.31.165
-
218.54.31.166
Targets
-
- Target b021eca8188fc387a61f16144201d240N.exe
- Size 322KB
- SHA256 33fde40e05fa570bb5d53dce070933ca1001e57687fa0327dfe587c97861dd55
- MD5 b021eca8188fc387a61f16144201d240
- SHA1 1ba5194fcd8babc2bfadc57dc7bc7bfb7be3dc41
- SHA512 5bd71c2db4ddcbd907454d2a88527a6267367b723da8882dc0a17ee9e97adf7479cca40eb9a110c24492ca4a4cf15478b65a05127c0062d399685908e68a95d0
- SSDEEP 6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYd:vHW138/iXWlK885rKlGSekcj66cik
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL