General
-
Target
ab19bd10ebee11dda917dc12b87efe4e2eb57f8960642b866db0e981ead211dd.exe
-
Size
335KB
-
Sample
250117-qzbseazmdx
-
MD5
8a4f36df99c1ac42ce9f0adea180d89d
-
SHA1
ed95cd771c036726dfbf06c35e2b40097b721b10
-
SHA256
ab19bd10ebee11dda917dc12b87efe4e2eb57f8960642b866db0e981ead211dd
-
SHA512
cef58581bc90bf7469375cdaaeb26ca4ef9b65a75a52c49bb4365a26ec3c6dc660d44149e007382020d89bb172b14dd9599de14e644ff41436fe8e902f060579
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcp:vHW138/iXWlK885rKlGSekcj66ciA
Static task
static1
Behavioral task
behavioral1
Sample
ab19bd10ebee11dda917dc12b87efe4e2eb57f8960642b866db0e981ead211dd.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
218.54.31.226
218.54.31.165
218.54.31.166
Targets
-
-
Target
ab19bd10ebee11dda917dc12b87efe4e2eb57f8960642b866db0e981ead211dd.exe
-
Size
335KB
-
MD5
8a4f36df99c1ac42ce9f0adea180d89d
-
SHA1
ed95cd771c036726dfbf06c35e2b40097b721b10
-
SHA256
ab19bd10ebee11dda917dc12b87efe4e2eb57f8960642b866db0e981ead211dd
-
SHA512
cef58581bc90bf7469375cdaaeb26ca4ef9b65a75a52c49bb4365a26ec3c6dc660d44149e007382020d89bb172b14dd9599de14e644ff41436fe8e902f060579
-
SSDEEP
6144:nvHWrZ+i8/iYiVst4UKVRw8pDrKlGSeNWcx1RsF9gc+XYIcp:vHW138/iXWlK885rKlGSekcj66ciA
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-