General
- Target e5eefe1651e793cd90eeb1b249b0468bac77692c91d3a2278a8384ede32b4d45
- Size 64KB
- Sample241008-ejrm5sxgpk
- SHA256 e5eefe1651e793cd90eeb1b249b0468bac77692c91d3a2278a8384ede32b4d45
- MD5 7c2f3ce1d5812e836119dd63371c72f5
- SHA1 3a52b35bf870351d97efb73be3fd74a9389cbbc1
- SHA512 728403cc9613eb1ad9341a4b327c849730dbfe43b41f7107e3a7ef1cba7a2534656fa23311a244a367ca0e662418a9e2315fe6a59f2953e49b879952fa31b824
- SSDEEP 1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/l:6bQRSHpAvzyf7MzeTYl
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
e5eefe1651e793cd90eeb1b249b0468bac77692c91d3a2278a8384ede32b4d45.exe
Resource
win7-20240903-en
7 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
218.54.47.76
-
218.54.47.77
-
218.54.47.74
Targets
-
- Target e5eefe1651e793cd90eeb1b249b0468bac77692c91d3a2278a8384ede32b4d45
- Size 64KB
- SHA256 e5eefe1651e793cd90eeb1b249b0468bac77692c91d3a2278a8384ede32b4d45
- MD5 7c2f3ce1d5812e836119dd63371c72f5
- SHA1 3a52b35bf870351d97efb73be3fd74a9389cbbc1
- SHA512 728403cc9613eb1ad9341a4b327c849730dbfe43b41f7107e3a7ef1cba7a2534656fa23311a244a367ca0e662418a9e2315fe6a59f2953e49b879952fa31b824
- SSDEEP 1536:6bQx5oPsr2vFxDPhAvzgAQzFZ77MzeTm/l:6bQRSHpAvzyf7MzeTYl
- MD5 SHA1 SHA512 SSDEEP
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL