General
-
Target
202897d1be5f1c6c5eefda718d3c12847fbf2e135bb81b729ce65ddcf6d01c3a
-
Size
52KB
-
Sample
250116-zt9xpayne1
-
MD5
61088988cf972c55af11d98a6cf44026
-
SHA1
d3769c3cefa3eda0e0eefb29288d8382ab388512
-
SHA256
202897d1be5f1c6c5eefda718d3c12847fbf2e135bb81b729ce65ddcf6d01c3a
-
SHA512
e3997e5d3b41a6f8f288dea40a0dd72f96d8027a2ffd5af6addf608a41c659d2a6e438e827eb86b53dac8d80be540b6d89d2902d59928ce27921cdcc2d1a9507
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCU:KsdXfBo/DBJBGzkP5PCU
Static task
static1
Behavioral task
behavioral1
Sample
202897d1be5f1c6c5eefda718d3c12847fbf2e135bb81b729ce65ddcf6d01c3a.exe
Resource
win7-20240729-en
Malware Config
Extracted
urelas
121.88.5.183
218.54.28.139
Targets
-
-
Target
202897d1be5f1c6c5eefda718d3c12847fbf2e135bb81b729ce65ddcf6d01c3a
-
Size
52KB
-
MD5
61088988cf972c55af11d98a6cf44026
-
SHA1
d3769c3cefa3eda0e0eefb29288d8382ab388512
-
SHA256
202897d1be5f1c6c5eefda718d3c12847fbf2e135bb81b729ce65ddcf6d01c3a
-
SHA512
e3997e5d3b41a6f8f288dea40a0dd72f96d8027a2ffd5af6addf608a41c659d2a6e438e827eb86b53dac8d80be540b6d89d2902d59928ce27921cdcc2d1a9507
-
SSDEEP
1536:h+Ds6ClDXuqweo/0khAUnJDgabGsVy6umfFlPhPCU:KsdXfBo/DBJBGzkP5PCU
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-