General
-
Target
f87ff597c610ff3964b970f2cbc04af27a320265f396b41cb542ec598edd1c0d
-
Size
514KB
-
Sample
241206-ezenhszmfw
-
MD5
c92cbcab5249ad4c953242d64a7131e2
-
SHA1
d624b172e67a076deb2277219537c7d907e736f0
-
SHA256
f87ff597c610ff3964b970f2cbc04af27a320265f396b41cb542ec598edd1c0d
-
SHA512
7f319ddf8f950d0ab7cc3eda25c61f83912ec62eff329ea5f58467993e60ba0a9d0a03966ed7e9fa11c87f9b91f5ec2ad136d5c08d778befa2ef21631d536cf9
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoa:3MUv2LAv9AQ1p4dK3
Behavioral task
behavioral1
Sample
f87ff597c610ff3964b970f2cbc04af27a320265f396b41cb542ec598edd1c0d.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
f87ff597c610ff3964b970f2cbc04af27a320265f396b41cb542ec598edd1c0d
-
Size
514KB
-
MD5
c92cbcab5249ad4c953242d64a7131e2
-
SHA1
d624b172e67a076deb2277219537c7d907e736f0
-
SHA256
f87ff597c610ff3964b970f2cbc04af27a320265f396b41cb542ec598edd1c0d
-
SHA512
7f319ddf8f950d0ab7cc3eda25c61f83912ec62eff329ea5f58467993e60ba0a9d0a03966ed7e9fa11c87f9b91f5ec2ad136d5c08d778befa2ef21631d536cf9
-
SSDEEP
12288:3o7CGWcQSyYI2VrFKH5RBv9AQ1pEDdKoa:3MUv2LAv9AQ1p4dK3
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-