General
-
Target
2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb
-
Size
94KB
-
Sample
241104-zpe7hsxepm
-
MD5
ee8a913f2854262030bddd60c19fb5d3
-
SHA1
8831086cbcbc6a8d29f47261a79ac113b19f714e
-
SHA256
2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb
-
SHA512
7e14a8fcf14cbcaf089b9d092f389c3501e1a03170eb8b56d44753ff7a7bc1627fc053a0b2779baccaa682ee58d25270074980419e86b383f7a9ba783168531f
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cZ:nqV9MziU4piRun7C3CP3MY
Static task
static1
Behavioral task
behavioral1
Sample
2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb
-
Size
94KB
-
MD5
ee8a913f2854262030bddd60c19fb5d3
-
SHA1
8831086cbcbc6a8d29f47261a79ac113b19f714e
-
SHA256
2b04c0ab05d5fe797909a880c50ba204171bfe8369d5f14adf5becdd40758abb
-
SHA512
7e14a8fcf14cbcaf089b9d092f389c3501e1a03170eb8b56d44753ff7a7bc1627fc053a0b2779baccaa682ee58d25270074980419e86b383f7a9ba783168531f
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9cZ:nqV9MziU4piRun7C3CP3MY
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-