General
-
Target
83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368.exe
-
Size
77KB
-
Sample
241217-k2q28awka1
-
MD5
ba5966e7a7005c0fe037d9db80ea7b34
-
SHA1
9233b4ba19c3dc77b14f5ed5121df173680c1964
-
SHA256
83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368
-
SHA512
5dc8c6d4ba70e887d0b5fc3babfcde45feae30c9caa521ed0e64ba9a614fd48d06a07d732378ddc9203be963a0073fe753b994d09334383a62ea1cfffe211d44
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfB:1Dcpl1mrE+EeBJfZ
Static task
static1
Behavioral task
behavioral1
Sample
83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368.exe
-
Size
77KB
-
MD5
ba5966e7a7005c0fe037d9db80ea7b34
-
SHA1
9233b4ba19c3dc77b14f5ed5121df173680c1964
-
SHA256
83e4ddcce6648da1af93d068a4ea079b7ac1de84fdb2f586ac2bd01f5fdc9368
-
SHA512
5dc8c6d4ba70e887d0b5fc3babfcde45feae30c9caa521ed0e64ba9a614fd48d06a07d732378ddc9203be963a0073fe753b994d09334383a62ea1cfffe211d44
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfB:1Dcpl1mrE+EeBJfZ
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-