General
-
Target
ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc
-
Size
332KB
-
Sample
241102-jj2wbs1dnr
-
MD5
c667e50123f002e1f2c03e2b39241a5d
-
SHA1
d88af9b44a3edae04e48b4fdb0aa271bc5a1f6cd
-
SHA256
ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc
-
SHA512
fc7702185feb529d21af9a14c6b451a807087e838b73a4970d4bd5258d496bd952d95d73373f5836737937a41888f8781f77e0a0a0eb11835054984980fc1218
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYV5:vHW138/iXWlK885rKlGSekcj66ciE5
Static task
static1
Behavioral task
behavioral1
Sample
ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc
-
Size
332KB
-
MD5
c667e50123f002e1f2c03e2b39241a5d
-
SHA1
d88af9b44a3edae04e48b4fdb0aa271bc5a1f6cd
-
SHA256
ebe83d0abe176b9172a4002a4bed73a1a059ac2b177b5c9254576fcf4f2668cc
-
SHA512
fc7702185feb529d21af9a14c6b451a807087e838b73a4970d4bd5258d496bd952d95d73373f5836737937a41888f8781f77e0a0a0eb11835054984980fc1218
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYV5:vHW138/iXWlK885rKlGSekcj66ciE5
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-