General
- Target 3da41a2d336a118b18f300025f0277b0e8eb11e6ddcf27681f7fba975c4b1066
- Size 58KB
- Sample240902-d7wrbs1grf
- SHA256 3da41a2d336a118b18f300025f0277b0e8eb11e6ddcf27681f7fba975c4b1066
- MD5 84405dbb2559fc4926b41cc82ff667d8
- SHA1 7280b42837b36a69ba034c1d489d8835cb674423
- SHA512 f1c996bdcc8592344cfc24e6f30c44f01d685a958677b7309882134c098cbb6a5bfb2a004b38931dcfb25778f8032dec66ce5ba69e35561c86ae6461fe9bbdf9
- SSDEEP 1536:7FMJMMXUuh4PinKYut3FG3HvlfLQKUn/3+GwSRBnFL1glw9k7Ds:7OJ3+inO+1Unikp1glOcs
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
8ee5373dd2e9bf3a9db9d3e78c294389a4733a201cf54c37b4c5376687bfe995.exe
Resource
win7-20240705-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target 8ee5373dd2e9bf3a9db9d3e78c294389a4733a201cf54c37b4c5376687bfe995
- Size 60KB
- SHA256 8ee5373dd2e9bf3a9db9d3e78c294389a4733a201cf54c37b4c5376687bfe995
- MD5 68b8c481947f5796977b3148b02db382
- SHA1 16498dee2ba1302c471c0235e98f331b1e68e448
- SHA512 6043083a313a384fa604147eca46ca4823e4fde842fa94daa9e1be3337c9f782a6ebdcd131916b4c451a8a38ac5d22753a6f833e2214175966d14a3e97f8c976
- SSDEEP 768:n5mhew0GpSyMe6hwUkdwJzh+qciaQRENEzxZbARtR06g2wqp4YPeznellmqGwxPb:nK0GjMeQG3iaQREuVZ6ro29p4YxbKd2
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL