General
-
Target
0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0
-
Size
163KB
-
Sample
241116-p86hpsxbqa
-
MD5
2fee79023c3db490f67b3f9cb46f0975
-
SHA1
ae591dbecd98f7f692cf31c37af3c302971e4e97
-
SHA256
0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0
-
SHA512
eebb0c3155bf84a97ab82c0c47c91af99c2a53390036f3945d75d84410719c94a6db5181c4dafe38743d7cb09042a7c9467e51d7bc0fb59690bc5b1ef21078a9
-
SSDEEP
1536:GRwT8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjpZWoI23A4tHP:APuk8QsH47nW5ppsoI23A4B
Behavioral task
behavioral1
Sample
0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0
-
Size
163KB
-
MD5
2fee79023c3db490f67b3f9cb46f0975
-
SHA1
ae591dbecd98f7f692cf31c37af3c302971e4e97
-
SHA256
0b23accc4c8adc1e0aeff563a2e6bae88074bf01bff6e71b871509bf91cfb0e0
-
SHA512
eebb0c3155bf84a97ab82c0c47c91af99c2a53390036f3945d75d84410719c94a6db5181c4dafe38743d7cb09042a7c9467e51d7bc0fb59690bc5b1ef21078a9
-
SSDEEP
1536:GRwT8ukP5sZK20EGIBpwW6NeleEQ77nuUWXJmU2AjpZWoI23A4tHP:APuk8QsH47nW5ppsoI23A4B
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-