General
- Target 7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
- Size 77KB
- Sample250118-e1p6mstkhn
- SHA256 7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
- MD5 8f572f08e35a886078f6a3c97eaa9130
- SHA1 82bf02be182f81832164b42f387607cdcd20abe0
- SHA512 dad129ab3a1e650cee5d3b13ba3189cdc44d880d138b6345710e003aa585e3db51f8ecf88246f36a6ce40c4795d5ff1fccea56332d197daf8d3f3ace81a5803a
- SSDEEP 1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1X:PLnFYZx7CeCEwrk
- MD5 SHA1 SHA512 SSDEEP
Static task
static1
1 signatures
Behavioral task
behavioral1
Sample
7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4.exe
Resource
win7-20240903-en
8 signatures
150 seconds
Malware Config
Extracted
Family
-
urelas
C2
-
112.175.88.207
-
112.175.88.208
Targets
-
- Target 7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
- Size 77KB
- SHA256 7a392492b4e488a7bc2d0be41a135081d0529877a3ac76d4832fd12cc5b982c4
- MD5 8f572f08e35a886078f6a3c97eaa9130
- SHA1 82bf02be182f81832164b42f387607cdcd20abe0
- SHA512 dad129ab3a1e650cee5d3b13ba3189cdc44d880d138b6345710e003aa585e3db51f8ecf88246f36a6ce40c4795d5ff1fccea56332d197daf8d3f3ace81a5803a
- SSDEEP 1536:PL2hIZA4fFfgK6xwHquw63wIl3eCEwWsg1X:PLnFYZx7CeCEwrk
- MD5 SHA1 SHA512 SSDEEP
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL