General
- Target 8f18d363dd032a46f27618080626eb1f.zip
- Size 58KB
- Sample240831-d565aateqq
- SHA256 d19ed72ef49e73b079fdfdaff12a724a2d9e8bb6107d182d09254973b6de5a14
- MD5 0fd7283d3f0823d6520616ac9b6a1123
- SHA1 72d2911d9a789d07b4c71f7f9caccad2be13be6f
- SHA512 b03615f6716a2b1c11ad26f16f92fc15abaac35bf677790797b56ad672e0acc01531e6dbc1c8e163ba944de0e1a31c418b2d4a7490ba21abd918bfb6b9b876db
- SSDEEP 1536:vg95bgd0oPMSlzUt9zUOsuwaPbaUPjqXs86Nv5:vg7g1ESlg/zFz9PqXT6Nv5
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
60477867b4b3356b8b7cfd685dd763840a456960263c449500cae4c65520c7b9.exe
Resource
win7-20240704-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 60477867b4b3356b8b7cfd685dd763840a456960263c449500cae4c65520c7b9
- Size 60KB
- SHA256 60477867b4b3356b8b7cfd685dd763840a456960263c449500cae4c65520c7b9
- MD5 8f18d363dd032a46f27618080626eb1f
- SHA1 95ce1d01e04e0d513711548415f166587a1ea103
- SHA512 5299d5297b1b1c9449f338c11f6d409dce4ad0106c83c0c7577d5163e2abf2e2348f401ae22141fc447d7cd9355a81c64166e36f9931f4e2a89060c3d2a29222
- SSDEEP 768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPa:nK0GjMeQG3iaQREuVZ6ro29p4YxbKdB
- MD5 SHA1 SHA512 SSDEEP
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
Deletes itself
Executes dropped EXE
Loads dropped DLL