General
-
Target
2bfb111d8714f20160428f234d0b985aac78918f95cc377732c98ed2332773dfN.exe
-
Size
77KB
-
Sample
241217-pddt7syngz
-
MD5
28704f7275bf0223f865e970b082b130
-
SHA1
ec08a00dade34cbc9053f8c487de1c341375b968
-
SHA256
2bfb111d8714f20160428f234d0b985aac78918f95cc377732c98ed2332773df
-
SHA512
51e6f89e9aa96f94b06f9bd549c4d7f6708b26ead85faa5eba453c7175c6925a873ea33a815597888e0b5b264db1fe26cc7dc61de61224d0684f24e3440dfc03
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpfz:1Dcpl1mrE+EeBJf7
Static task
static1
Behavioral task
behavioral1
Sample
2bfb111d8714f20160428f234d0b985aac78918f95cc377732c98ed2332773dfN.exe
Resource
win7-20241023-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
2bfb111d8714f20160428f234d0b985aac78918f95cc377732c98ed2332773dfN.exe
-
Size
77KB
-
MD5
28704f7275bf0223f865e970b082b130
-
SHA1
ec08a00dade34cbc9053f8c487de1c341375b968
-
SHA256
2bfb111d8714f20160428f234d0b985aac78918f95cc377732c98ed2332773df
-
SHA512
51e6f89e9aa96f94b06f9bd549c4d7f6708b26ead85faa5eba453c7175c6925a873ea33a815597888e0b5b264db1fe26cc7dc61de61224d0684f24e3440dfc03
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpfz:1Dcpl1mrE+EeBJf7
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-