General
-
Target
e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0.exe
-
Size
440KB
-
Sample
241123-wh1cbsyqfs
-
MD5
a40cb26479ed7aa42946772c7b2e7021
-
SHA1
b768c64e7ba1bb171ac3d0acf1a43390f1d214bf
-
SHA256
e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0
-
SHA512
d60f24ca50d22575a1fdd28636ea6238e5da657a6a9d4ea07eb2a117eef59e4bbe7c442ff9318feeb534779cc6f37a9e743d18eb54b21ed2bd0eeab67c046f22
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjP:oMpASIcWYx2U6hAJQng
Behavioral task
behavioral1
Sample
e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.165
218.54.31.226
Targets
-
-
Target
e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0.exe
-
Size
440KB
-
MD5
a40cb26479ed7aa42946772c7b2e7021
-
SHA1
b768c64e7ba1bb171ac3d0acf1a43390f1d214bf
-
SHA256
e7ebbb224a3e3fd465ba8be4646569e2bdc346efe57f999abe9876f86d62fda0
-
SHA512
d60f24ca50d22575a1fdd28636ea6238e5da657a6a9d4ea07eb2a117eef59e4bbe7c442ff9318feeb534779cc6f37a9e743d18eb54b21ed2bd0eeab67c046f22
-
SSDEEP
6144:oEK25f5ySIcWLsxIIW4DYM6SB6v+qLnAzYmhwrxcvkzmSOpjP:oMpASIcWYx2U6hAJQng
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-