General
-
Target
c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05.exe
-
Size
467KB
-
Sample
241123-r5njtswrbw
-
MD5
7706177362adc24d303635b85b477ea9
-
SHA1
f896fd35b6a0a4c4f14abb72273b9c96f1aacc9b
-
SHA256
c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05
-
SHA512
b4d2fc0e851a89b29e24d14a2ceae4fcd119aca4d578982101c33cc661d81cd218389ae4a6186682651c200fc3de912c5e5871ec2609ea78ea3170317cc7ce8e
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mp:9x9GzHlTv/b35tecFB62
Behavioral task
behavioral1
Sample
c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
121.88.5.184
Targets
-
-
Target
c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05.exe
-
Size
467KB
-
MD5
7706177362adc24d303635b85b477ea9
-
SHA1
f896fd35b6a0a4c4f14abb72273b9c96f1aacc9b
-
SHA256
c6ebbf4d336d65dcda38cfbd48f7c87975128164455cd210ac905a8234b2df05
-
SHA512
b4d2fc0e851a89b29e24d14a2ceae4fcd119aca4d578982101c33cc661d81cd218389ae4a6186682651c200fc3de912c5e5871ec2609ea78ea3170317cc7ce8e
-
SSDEEP
12288:93CtSokfFGUMKwlTIU/b37dJ75WEe+eKTxB6mp:9x9GzHlTv/b35tecFB62
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-