General
-
Target
d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086N
-
Size
94KB
-
Sample
241108-qsqb8atbka
-
MD5
5cced4fc225a18cd4966d154824a48f0
-
SHA1
5dca6fb4d5039d9c53508cceebd6129871d55033
-
SHA256
d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086
-
SHA512
7584537105ba782c3de100bd4ed820f2509cf85dfd3e0b2c81dbe78adb9f80b0a6685d097680c2c812667b514240fb43ac381a29c69fd80261f8894549b4be91
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9c5:nqV9MziU4piRun7C3CP3Ms
Static task
static1
Behavioral task
behavioral1
Sample
d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086N.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.209
112.175.88.207
Targets
-
-
Target
d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086N
-
Size
94KB
-
MD5
5cced4fc225a18cd4966d154824a48f0
-
SHA1
5dca6fb4d5039d9c53508cceebd6129871d55033
-
SHA256
d8bbda9778d3f06ad05fda6c6b3ad935b42d860c797a4b6344e3cb71f28f3086
-
SHA512
7584537105ba782c3de100bd4ed820f2509cf85dfd3e0b2c81dbe78adb9f80b0a6685d097680c2c812667b514240fb43ac381a29c69fd80261f8894549b4be91
-
SSDEEP
1536:nwhq8V9IpPf2lgiIJ4pivJnuNVueC39GdBR3M9c5:nqV9MziU4piRun7C3CP3Ms
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-