General
-
Target
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
Size
138KB
-
Sample
241217-evz4na1ner
-
MD5
ba2e877d4d5faeef6fcfd92994b8023e
-
SHA1
3da68acf410cc9fbbda12b3a7a58f19d6e528b2d
-
SHA256
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
SHA512
be93f12bd639fc8d3442dcd723f78b4379647afd9ecdbe1fb8c1a81bc9ddc003504702d008b880c5d36a7fa2e6a48a283670ca09a0fa01c0dabf0cb02ef9b1d8
-
SSDEEP
3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GE:VUhAOOt84Rh9KEi2E
Static task
static1
Behavioral task
behavioral1
Sample
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
Size
138KB
-
MD5
ba2e877d4d5faeef6fcfd92994b8023e
-
SHA1
3da68acf410cc9fbbda12b3a7a58f19d6e528b2d
-
SHA256
e8fd0c8223bc07010f1212460f50c174112200f5298b34f7d8747bb5166a1d0c
-
SHA512
be93f12bd639fc8d3442dcd723f78b4379647afd9ecdbe1fb8c1a81bc9ddc003504702d008b880c5d36a7fa2e6a48a283670ca09a0fa01c0dabf0cb02ef9b1d8
-
SSDEEP
3072:VUhMsp+K1OXZjftqRO6DL/qHR4oBvsA7Ipr308dU4GE:VUhAOOt84Rh9KEi2E
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-