General
-
Target
3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540N
-
Size
137KB
-
Sample
241029-eqlepssnc1
-
MD5
6796127616ea431168ec9def87121570
-
SHA1
b757b0db9eb418bc53bc180b89d276219b6cc926
-
SHA256
3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540
-
SHA512
7decf2528b6a5e1cec54f879c3d7268b90f0c07ed467b2b0cea7d893e92f6e677b52d0a1ea18313eef3504fa32e1b7de065cc0acde80a39f8006e28bb21d1c5e
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI3:P/5kqCxiXEcO3XfGf2tMUf6odgR5A43
Behavioral task
behavioral1
Sample
3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540N.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540N
-
Size
137KB
-
MD5
6796127616ea431168ec9def87121570
-
SHA1
b757b0db9eb418bc53bc180b89d276219b6cc926
-
SHA256
3727ddffbacf1c08dd69ce37e781554c19453dc4ea44e471cf01c160397a8540
-
SHA512
7decf2528b6a5e1cec54f879c3d7268b90f0c07ed467b2b0cea7d893e92f6e677b52d0a1ea18313eef3504fa32e1b7de065cc0acde80a39f8006e28bb21d1c5e
-
SSDEEP
1536:P/oEkqfCZ10zcT9Yh8AIXcjyz9cOXfiXGImcatMrsWjcdf6odgR5APfI3:P/5kqCxiXEcO3XfGf2tMUf6odgR5A43
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-