General
-
Target
c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02fN.exe
-
Size
69KB
-
Sample
241216-sbpepstqbk
-
MD5
6abd23458b2facfeae286f2917ad0050
-
SHA1
297e973974ff3bca0100f428e9ed9d00736f05d7
-
SHA256
c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02f
-
SHA512
96630c05ff83bf901393221c6ab299d5fe49989bec05ac22a97340082b6c7327545b57f3a5f10b0306b89a395a863ea81783814476a6b5bd164667ec44d869fd
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrW:l//AjMp+u2onejH2PeEW
Static task
static1
Behavioral task
behavioral1
Sample
c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02fN.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.47.76
218.54.47.77
218.54.47.74
Targets
-
-
Target
c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02fN.exe
-
Size
69KB
-
MD5
6abd23458b2facfeae286f2917ad0050
-
SHA1
297e973974ff3bca0100f428e9ed9d00736f05d7
-
SHA256
c9ada9752a8951c74e6a06115df790c40c89bb881410e34a83bf358319d7a02f
-
SHA512
96630c05ff83bf901393221c6ab299d5fe49989bec05ac22a97340082b6c7327545b57f3a5f10b0306b89a395a863ea81783814476a6b5bd164667ec44d869fd
-
SSDEEP
1536:04/WgLAjdZsp+uChoLnDeoqYAJjvLFymnHsPeOrW:l//AjMp+u2onejH2PeEW
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-