General
-
Target
c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f
-
Size
77KB
-
Sample
250118-lmma6azkfw
-
MD5
3111f9fd6eba6b81f2b694d4bc429ef9
-
SHA1
4c507d0e044b5e2ef1789c84103249a80d1397f6
-
SHA256
c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f
-
SHA512
00f517dc8f922fc4553f6ddacc8a6d3abee0271780739c19756ead94b11b3edfc1d4e03e4c0ef92358827d6f53c8106ae10f015be9c056af20be6ecc1e22a48f
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf5:1Dcpl1mrE+EeBJfB
Static task
static1
Behavioral task
behavioral1
Sample
c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f.exe
Resource
win7-20241010-en
Malware Config
Extracted
urelas
112.175.88.208
112.175.88.207
Targets
-
-
Target
c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f
-
Size
77KB
-
MD5
3111f9fd6eba6b81f2b694d4bc429ef9
-
SHA1
4c507d0e044b5e2ef1789c84103249a80d1397f6
-
SHA256
c227e2aa0b489c19454d09b03a9a634d5efc7ce2b119bde44f91eba63eed8f4f
-
SHA512
00f517dc8f922fc4553f6ddacc8a6d3abee0271780739c19756ead94b11b3edfc1d4e03e4c0ef92358827d6f53c8106ae10f015be9c056af20be6ecc1e22a48f
-
SSDEEP
1536:1D433Oe20lleqbmruXP+9E5KJ+e8Xwhpf5:1Dcpl1mrE+EeBJfB
-
Urelas family
-
Checks computer location settings
Looks up country code configured in the registry, likely geofence.
-
Deletes itself
-
Executes dropped EXE
-
Loads dropped DLL
-