General
-
Target
11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30
-
Size
80KB
-
Sample
241124-ykmkcswnas
-
MD5
3872236fecc58e4f8e40db5ec0b326b2
-
SHA1
519a4ec4bfd71b64be54f46fa1cbc5bf071185e0
-
SHA256
11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30
-
SHA512
c7ef565beaffbc46aca30ff2962aaddafce4de0f001439bf2a4800dfabe618ccc29a35b62cee44958dc05988de088eada88da70a7c8ea9db3d7381555945b9a4
-
SSDEEP
1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8teLx:4lnhYPlVMqmyAFIRR+x
Static task
static1
Behavioral task
behavioral1
Sample
11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30
-
Size
80KB
-
MD5
3872236fecc58e4f8e40db5ec0b326b2
-
SHA1
519a4ec4bfd71b64be54f46fa1cbc5bf071185e0
-
SHA256
11c15d7786ac2473f9c2605ad41f47ffed0c329cd16396e3462b3b1eb0fb8f30
-
SHA512
c7ef565beaffbc46aca30ff2962aaddafce4de0f001439bf2a4800dfabe618ccc29a35b62cee44958dc05988de088eada88da70a7c8ea9db3d7381555945b9a4
-
SSDEEP
1536:ml531xxqA3zM9ttjtt574bbp8Fm43AOEI0QdeFUU8teLx:4lnhYPlVMqmyAFIRR+x
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-