General
-
Target
7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a
-
Size
51KB
-
Sample
241220-bz272awpcr
-
MD5
60c8ab1f09da41f400a3e80262db7bfb
-
SHA1
35a99f02310029a6680dbaf2d3604a15148b33a3
-
SHA256
7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a
-
SHA512
ce404af2ff34d29154ab301e3b72080ca4ccbca199e60fa9eaae4ce1d75dd1da2fc91040182acb4a2a23cdbe4bf41b40bad4fe32e44ed49e215029f598b541e8
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPi:KsdXfBo/DBJBGzkP5Pi
Static task
static1
Behavioral task
behavioral1
Sample
7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a
-
Size
51KB
-
MD5
60c8ab1f09da41f400a3e80262db7bfb
-
SHA1
35a99f02310029a6680dbaf2d3604a15148b33a3
-
SHA256
7475a44bab05ac5fa957f250a2ef2bb1b773cb9a58f7a9390fe78c439548242a
-
SHA512
ce404af2ff34d29154ab301e3b72080ca4ccbca199e60fa9eaae4ce1d75dd1da2fc91040182acb4a2a23cdbe4bf41b40bad4fe32e44ed49e215029f598b541e8
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPi:KsdXfBo/DBJBGzkP5Pi
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-