General
- Target e746fbef75e3cc09dc69be92d1aabb959214c034706a3e801036689ce5729471N
- Size 64KB
- Sample240918-3yetwszdmd
- SHA256 e746fbef75e3cc09dc69be92d1aabb959214c034706a3e801036689ce5729471
- MD5 4470b939c7d2bc4668a99b4026ff2ad0
- SHA1 99e5071ecc33b6bf05bc3a0d39313274ee774837
- SHA512 f6ee3a92635447b3c8be8e70f4875d31e54399175a4ea88bb83d4ade0c70330df06fe84f8b8a05ddce36fdcbe4f72b8077dbb4d3c4d6ac08806c05fe1102ea10
- SSDEEP 1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUDu:6bQRSHpAvzyf7MzeThDu
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e746fbef75e3cc09dc69be92d1aabb959214c034706a3e801036689ce5729471N.exe
Resource
win7-20240903-en
7 signatures
120 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target e746fbef75e3cc09dc69be92d1aabb959214c034706a3e801036689ce5729471N
- Size 64KB
- SHA256 e746fbef75e3cc09dc69be92d1aabb959214c034706a3e801036689ce5729471
- MD5 4470b939c7d2bc4668a99b4026ff2ad0
- SHA1 99e5071ecc33b6bf05bc3a0d39313274ee774837
- SHA512 f6ee3a92635447b3c8be8e70f4875d31e54399175a4ea88bb83d4ade0c70330df06fe84f8b8a05ddce36fdcbe4f72b8077dbb4d3c4d6ac08806c05fe1102ea10
- SSDEEP 1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTmUDu:6bQRSHpAvzyf7MzeThDu
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL