General
-
Target
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
Size
77KB
-
Sample
250118-e1p6mstkhn
-
MD5
8f572f08e35a886078f6a3c97eaa9130
-
SHA1
82bf02be182f81832164b42f387607cdcd20abe0
-
SHA256
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
SHA512
dad129ab3a1e650cee5d3b13ba3189cdc44d880d138b6345710e003aa585e3db51f8ecf88246f36a6ce40c4795d5ff1fccea56332d197daf8d3f3ace81a5803a
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1X:PLnFYZx7CeCEwrk
Static task
static1
Behavioral task
behavioral1
Sample
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4.exe
Resource
win7-20240903-en
Malware Config
Extracted
urelas
112.175.88.207
112.175.88.208
Targets
-
-
Target
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
Size
77KB
-
MD5
8f572f08e35a886078f6a3c97eaa9130
-
SHA1
82bf02be182f81832164b42f387607cdcd20abe0
-
SHA256
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
-
SHA512
dad129ab3a1e650cee5d3b13ba3189cdc44d880d138b6345710e003aa585e3db51f8ecf88246f36a6ce40c4795d5ff1fccea56332d197daf8d3f3ace81a5803a
-
SSDEEP
1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1X:PLnFYZx7CeCEwrk
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-