General
-
Target
cb5fffbd700a1564046b19b3458cf4bcdc15760dcf402e4b906c9cc2b7082742N
-
Size
80KB
-
Sample
241108-b8d7kasepk
-
MD5
90548919a9060797b4bf3759f29db290
-
SHA1
30dfc18f28dad95d0b97cbe80ea48b3c07c81062
-
SHA256
cb5fffbd700a1564046b19b3458cf4bcdc15760dcf402e4b906c9cc2b7082742
-
SHA512
5103f96f283fe5cb7a8f4bc0d0e60653ee721a7d7dca590d49d139e4fe86bc72742405a6fa82cd78ea6ce5eb542bc596eee6b4d8eda8d01cd9ce01cb63c5b3aa
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1+:zLCEZTGx518ox6+
Static task
static1
Behavioral task
behavioral1
Sample
cb5fffbd700a1564046b19b3458cf4bcdc15760dcf402e4b906c9cc2b7082742N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.28.139
121.88.5.183
Targets
-
-
Target
cb5fffbd700a1564046b19b3458cf4bcdc15760dcf402e4b906c9cc2b7082742N
-
Size
80KB
-
MD5
90548919a9060797b4bf3759f29db290
-
SHA1
30dfc18f28dad95d0b97cbe80ea48b3c07c81062
-
SHA256
cb5fffbd700a1564046b19b3458cf4bcdc15760dcf402e4b906c9cc2b7082742
-
SHA512
5103f96f283fe5cb7a8f4bc0d0e60653ee721a7d7dca590d49d139e4fe86bc72742405a6fa82cd78ea6ce5eb542bc596eee6b4d8eda8d01cd9ce01cb63c5b3aa
-
SSDEEP
1536:zxKyhnAUfUiZR9G84qk+Be/HZ17hmZpDsxu1+:zLCEZTGx518ox6+
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-