General
-
Target
d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8edN.exe
-
Size
77KB
-
Sample
241219-agkplaypej
-
MD5
48cef7aeed25b7247ff2736bb4e74630
-
SHA1
1806846485aef5af14b99a0017230b1099c6cdec
-
SHA256
d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8ed
-
SHA512
09c461496fe10e76e85b11befbca37c828b00617b60de8688594d0c3d614c4ff42536d762badf2a5acb56ea928f400aae14bf16c43af34fdab25ebaff7011126
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfK:1Dcpl1mrE+EeBJfC
Static task
static1
Behavioral task
behavioral1
Sample
d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8edN.exe
Resource
win7-20240708-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8edN.exe
-
Size
77KB
-
MD5
48cef7aeed25b7247ff2736bb4e74630
-
SHA1
1806846485aef5af14b99a0017230b1099c6cdec
-
SHA256
d2ce60f5f924174fca24a38a45fb70a2de8cf6142ab3bb82e5ae0baeb33cf8ed
-
SHA512
09c461496fe10e76e85b11befbca37c828b00617b60de8688594d0c3d614c4ff42536d762badf2a5acb56ea928f400aae14bf16c43af34fdab25ebaff7011126
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8XwhpfK:1Dcpl1mrE+EeBJfC
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-