General
-
Target
e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df.exe
-
Size
51KB
-
Sample
241118-2hz98axdrq
-
MD5
9f4aaf15d5b93dd6fc5827f8609e5490
-
SHA1
dc7a99bcdac0547e89f806cbb8d20e38912dbf8e
-
SHA256
e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df
-
SHA512
69b08cecda3eb43db53b2fa1bac4d463f67db0119a09d540f59c8fc544e70f56db3b0d76ef90513302c885ce53632fca8ed26f4eb123ee71e239e82a4350f31b
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPs:KsdXfBo/DBJBGzkP5Ps
Static task
static1
Behavioral task
behavioral1
Sample
e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df.exe
-
Size
51KB
-
MD5
9f4aaf15d5b93dd6fc5827f8609e5490
-
SHA1
dc7a99bcdac0547e89f806cbb8d20e38912dbf8e
-
SHA256
e380a58051d960ccbfee0df80aba87f15f0c00ab8b182d1bbe2aa4e0f61ce8df
-
SHA512
69b08cecda3eb43db53b2fa1bac4d463f67db0119a09d540f59c8fc544e70f56db3b0d76ef90513302c885ce53632fca8ed26f4eb123ee71e239e82a4350f31b
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPs:KsdXfBo/DBJBGzkP5Ps
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-