General
-
Target
72244b75c47cffbbf7fd85671be3f96de4307aae1e526e60bb9a6e0c5eaf256c.exe
-
Size
298KB
-
Sample
241123-ext1esxrhs
-
MD5
ecee80a6ccffbce36de0d4a2f085e87f
-
SHA1
64db498370b7e02d14a949470876b0469dac893b
-
SHA256
72244b75c47cffbbf7fd85671be3f96de4307aae1e526e60bb9a6e0c5eaf256c
-
SHA512
41c1cdc9104ff4cf42ccb9aeba28cf16d873d4b9ac338491177b4f44b427cf4a342a4f97c57223ec38139b34b3bcf1bae2f7a0ed9858379909d2a0bac48c97c0
-
SSDEEP
6144:kN43gKpDPeVvnAmZ64XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXSE:Y4npK2y8zzkGHVqoq/gKl
Static task
static1
Behavioral task
behavioral1
Sample
72244b75c47cffbbf7fd85671be3f96de4307aae1e526e60bb9a6e0c5eaf256c.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
Targets
-
-
Target
72244b75c47cffbbf7fd85671be3f96de4307aae1e526e60bb9a6e0c5eaf256c.exe
-
Size
298KB
-
MD5
ecee80a6ccffbce36de0d4a2f085e87f
-
SHA1
64db498370b7e02d14a949470876b0469dac893b
-
SHA256
72244b75c47cffbbf7fd85671be3f96de4307aae1e526e60bb9a6e0c5eaf256c
-
SHA512
41c1cdc9104ff4cf42ccb9aeba28cf16d873d4b9ac338491177b4f44b427cf4a342a4f97c57223ec38139b34b3bcf1bae2f7a0ed9858379909d2a0bac48c97c0
-
SSDEEP
6144:kN43gKpDPeVvnAmZ64XMxvQ4x1OpGcm9VQl0lM/oJ4/gupXSE:Y4npK2y8zzkGHVqoq/gKl
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-